Wsdiscovery

Locate WS-Discovery enabled devices and output device metadata in JSON or text.

811|123|Updated Nov 17, 2025
One-click install
npx skills add https://github.com/BrownFineSecurity/iothackbot --skill wsdiscovery
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Wsdiscovery
Source: https://github.com/BrownFineSecurity/iothackbot/tree/main/.claude/skills/wsdiscovery
Command: npx skills add https://github.com/BrownFineSecurity/iothackbot --skill wsdiscovery

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires python-pip, colorama.

What problem does it solve?

This Skill automates the discovery of ONVIF cameras and other IoT devices on a network using the WS-Discovery protocol, eliminating the need for manual network scanning or specific vendor tools. This saves time and effort in identifying network-connected devices for security assessments or inventory.

Core Features & Use Cases

  • Automatic Device Discovery: Scans a specified host or network for WS-Discovery enabled devices.
  • Detailed Device Information: Extracts and displays crucial details like IP addresses, device types, manufacturer info, firmware versions, and service endpoints (XAddrs).
  • ONVIF Camera Identification: Specifically designed to identify and enumerate ONVIF-compliant IP cameras and NVRs.
  • Use Case: Quickly find all ONVIF cameras on a local subnet, identify their IP addresses and service endpoints, and prepare for further security testing.

Quick Start

Use the Wsdiscovery skill to scan the network 192.168.1.0/24 to discover all ONVIF-enabled cameras and IoT devices.

Frequently Asked Questions about Wsdiscovery

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I discover ONVIF cameras on my network?

WS-Discovery automatically scans your network to locate ONVIF cameras and IoT devices by querying WS-Discovery enabled equipment. Specify your network range (e.g., 192.168.1.0/24) and the Skill returns device IP addresses, ports, UUIDs, manufacturer info, firmware versions, and service endpoints in text, JSON, or XML format.

What information can I extract from discovered devices?

Device discovery yields IP addresses, port numbers, UUIDs, device types, manufacturer names, model numbers, firmware versions, physical locations, and XAddrs (service endpoints). This metadata enables rapid inventory and security assessment of network-connected ONVIF cameras, NVRs, printers, and WS-Discovery advertised equipment.

Can I scan multiple subnets or broadcast scopes at once?

WS-Discovery queries work across LANs, subnets, and broadcast scopes within your specified network range. You can target individual hosts or broader CIDR ranges to enumerate all WS-Discovery enabled devices in that scope without requiring vendor-specific tools.

What output formats are supported for discovered device data?

Device results export as text, JSON, verbose XML, or quiet mode. JSON and XML formats preserve complete metadata for downstream parsing; text output and quiet mode suit terminal workflows and scripting integration.

Do I need special tools or network access to run WS-Discovery scans?

WS-Discovery requires Python and pip for dependency installation (colorama for terminal output). Network access to the target subnet is necessary; no vendor tools or ONVIF client libraries are required since WS-Discovery is a standard protocol for device advertisement.