Agent skill · security · aiskillstore
onvifscan
ONVIF device security scanner for testing authentication and brute-forcing credentials. Use when you need to assess security of IP cameras or ONVIF-enabled devices.
Why this skill is useful
Provides specific commands and options for testing ONVIF device security that the AI wouldn't reliably generate on its own.
What it needs
Requires onvifscan installed locally. About 1k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Onvifscan - ONVIF Security Scanner You are helping the user scan ONVIF devices for security issues including authentication bypasses and weak credentials using the onvifscan tool. Tool Overview Onvifscan is an ONVIF device security scanner that can: Test for unauthenticated access to ONVIF endpoints Perform credential brute-forcing attacks Instructions When the user asks to scan ONVIF devices, test IP cameras, or assess IoT device security: 1. Determine scan type: auth: Authentication and access control testing (recommended to start) brute: Credential brute-forcing on password-protected endpoints 2. Get target information: Ask for the device URL/IP Determine which scan type to run Check if they have custom wordlists 3. Execute the scan: Use the onvifscan command from the iothackbot bin directory Format: onvifscan <subcommand> <url> [options] Subcommands Auth Scan Tests ONVIF endpoints for authentication requirements: Options: -v, --verbose: Show full XML responses -a, --all: Test ALL endpoints including potentially destructive ones --format text json quiet: Output format Brute Force Attempts credential brute-forcing on protected endpoints: Options: --usernames <file>: Custom usernames wordlist (default: built-in onvif-usernames.txt) --passwords <file>: Custom passwords wordlist (default: built-in onvif-passwords.txt) --format text json quiet: Output format Examples Quick auth check on a device: Auth check with verbose output: Brute force with custom wordlists: Important Notes URLs can omit http:// - it will be added automatically Auth scan is non-destructive and safe to run Use -a flag with caution - may test destructive endpoints Brute force is rate-limited to prevent device overload (max 20 attempts by default) Built-in wordlists located in wordlists/ directory
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/onvifscan