What is an XAddr and why is it important?

An XAddr is a service endpoint URL found during discovery. It is critical because it provides the exact location for subsequent management and control commands via the ONVIF protocol.

Does this tool require special network access?

WS-Discovery relies on multicast and broadcast traffic. The tool is most effective when run from a machine on the same local network as the target devices.

Can I scan specific IP addresses or just the whole network?

The tool supports both. You can target a specific hostname/IP for directed enumeration or use the standard multicast address (239.255.255.250) to find all responsive devices on the segment.

Can I export the discovery results to other tools?

Yes, the skill supports a JSON output format, making it easy to pipe discovery data into other automation scripts or security tools for further analysis.

What devices can I find with the wsdiscovery skill?

It identifies any device supporting the WS-Discovery protocol, which most commonly includes ONVIF-compliant IP cameras, Network Video Recorders (NVRs), printers, and various smart building controllers.

IoT WS-Discovery Scanner

Name: IoT WS-Discovery Scanner
Author: BrownFineSecurity

byBrownFineSecurity

•

494

•

セキュリティとテスト

Discovers and enumerates ONVIF cameras and IoT devices using the WS-Discovery protocol for network security assessments.

The wsdiscovery skill enables Claude to identify and analyze network-connected devices that support the WS-Discovery protocol, which is standard for ONVIF-compliant security cameras, NVRs, and various smart office equipment. It streamlines the reconnaissance phase of IoT penetration testing by automatically extracting critical metadata such as manufacturer details, hardware versions, firmware revisions, and service endpoints (XAddrs). This tool is essential for security researchers and network administrators who need to map their IoT footprint, inventory connected hardware, and prepare for deeper vulnerability scanning.

主な機能

01Verbose mode for inspecting raw XML responses from discovered devices

02Extraction of detailed device metadata including manufacturer, model, and serial numbers

03Identification of Service Endpoints (XAddrs) for further API testing

04Support for multiple output formats including human-readable text and machine-readable JSON

05494 GitHub stars

06Automated discovery of ONVIF-compliant cameras and NVRs

ユースケース

01Network reconnaissance for IoT penetration testing and security audits

02Identifying firmware versions and hardware models for vulnerability mapping

03Automated inventory management of ONVIF security equipment on large networks

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add brownfinesecurity/iothackbot wsdiscovery

For use in Claude.ai and ChatGPT

Download Skill