Audits ONVIF-enabled IP cameras and IoT devices for authentication vulnerabilities and weak credentials.
Onvifscan is a specialized security auditing tool designed for assessing the security posture of ONVIF-compliant hardware, such as IP surveillance cameras. It enables security researchers and system administrators to identify exposed endpoints that lack proper authentication and perform targeted credential brute-forcing to uncover weak passwords. By integrating with Claude Code, this skill streamlines the process of IoT device discovery and hardening, providing actionable insights into network security risks associated with physical security hardware.
Key Features
01Automated ONVIF endpoint discovery and authentication auditing
02Support for custom username and password wordlists
03Non-destructive scanning modes for safe environmental testing
040 GitHub stars
05Verbose XML response analysis for deep device inspection
06Targeted credential brute-forcing using built-in or custom wordlists
Use Cases
01Testing IP cameras for default or weak credentials during security audits
02Identifying unauthenticated ONVIF service endpoints in local networks
03Validating device hardening configurations for IoT surveillance systems
