Wsdiscovery - WS-Discovery Protocol Scanner
You are helping the user discover and enumerate devices using the WS-Discovery protocol (commonly used by ONVIF cameras and IoT devices) using the wsdiscovery tool.
Tool Overview
Wsdiscovery implements the WS-Discovery protocol to discover network devices that support this standard. It's particularly useful for finding ONVIF cameras, network video recorders (NVRs), and other IoT devices that advertise themselves via WS-Discovery.
Instructions
When the user asks to discover ONVIF devices, find network cameras, or scan for WS-Discovery devices:
- Understand the target:
- Ask for the target hostname or IP address - Determine if they want verbose output (full XML responses) - Decide on output format
- Execute the scan:
- Use the wsdiscovery command from the iothackbot bin directory - Basic usage: wsdiscovery <hostname_or_ip> - For verbose output: wsdiscovery <hostname_or_ip> -v - For JSON output: wsdiscovery <hostname_or_ip> --format json
- Output formats:
- --format text (default): Human-readable colored output with device details - --format json: Machine-readable JSON - --format quiet: Minimal output
What It Discovers
The tool extracts and displays:
- IP addresses and ports
- Endpoint references (device UUIDs)
- Device types
- Manufacturer information
- Device names and models
- Hardware versions
- Serial numbers
- Firmware versions
- Location information
- Service endpoints (XAddrs) - URLs for device management
- Metadata versions
Examples
Discover devices on a specific host:
wsdiscovery 192.168.1.100Discover with full XML responses:
wsdiscovery 192.168.1.100 -vOutput device information as JSON:
wsdiscovery 192.168.1.100 --format jsonScan network broadcast address to find all devices:
wsdiscovery 239.255.255.250Important Notes
- WS-Discovery uses multicast/broadcast discovery
- Devices must support the WS-Discovery protocol to be found
- Common with ONVIF cameras, printers, and network media devices
- Service endpoints (XAddrs) can be used with onvifscan for further testing
- The tool parses ONVIF-specific scope information when available