Wsdiscovery - WS-Discovery Protocol Scanner

You are helping the user discover and enumerate devices using the WS-Discovery protocol (commonly used by ONVIF cameras and IoT devices) using the wsdiscovery tool.

Tool Overview

Wsdiscovery implements the WS-Discovery protocol to discover network devices that support this standard. It's particularly useful for finding ONVIF cameras, network video recorders (NVRs), and other IoT devices that advertise themselves via WS-Discovery.

Instructions

When the user asks to discover ONVIF devices, find network cameras, or scan for WS-Discovery devices:

1. •

   Understand the target:

   • •Ask for the target hostname or IP address
   • •Determine if they want verbose output (full XML responses)
   • •Decide on output format
2. •

   Execute the scan:

   • •Use the wsdiscovery command from the iothackbot bin directory
   • •Basic usage: wsdiscovery <hostname_or_ip>
   • •For verbose output: wsdiscovery <hostname_or_ip> -v
   • •For JSON output: wsdiscovery <hostname_or_ip> --format json
3. •

   Output formats:

   • •--format text (default): Human-readable colored output with device details
   • •--format json: Machine-readable JSON
   • •--format quiet: Minimal output

What It Discovers

The tool extracts and displays:

• •IP addresses and ports
• •Endpoint references (device UUIDs)
• •Device types
• •Manufacturer information
• •Device names and models
• •Hardware versions
• •Serial numbers
• •Firmware versions
• •Location information
• •Service endpoints (XAddrs) - URLs for device management
• •Metadata versions

Examples

Discover devices on a specific host:

wsdiscovery 192.168.1.100

Discover with full XML responses:

wsdiscovery 192.168.1.100 -v

Output device information as JSON:

wsdiscovery 192.168.1.100 --format json

Scan network broadcast address to find all devices:

wsdiscovery 239.255.255.250

Important Notes

• •WS-Discovery uses multicast/broadcast discovery
• •Devices must support the WS-Discovery protocol to be found
• •Common with ONVIF cameras, printers, and network media devices
• •Service endpoints (XAddrs) can be used with onvifscan for further testing
• •The tool parses ONVIF-specific scope information when available