[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6EN6M8RVKB85D5ZGJM9TA1M":3,"skill-same:01M6EN6M8RVKB85D5ZGJM9TA1M":65},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":31,"linkOnly":32,"markdownContent":33,"markdownBody":34,"frontMatter":35,"refName":36,"commitSha":37,"skillDirectory":38,"forksCount":39,"repositoryHtmlUrl":40,"repositoryHomepageUrl":41,"ownerHtmlUrl":42,"ownerBlogUrl":6,"ownerDescription":43,"updatedAt":44,"install":45,"resources":58},"01M6EN6M8RVKB85D5ZGJM9TA1M","onvifscan",null,"ONVIF device security scanner for testing authentication and brute-forcing credentials. Use when you need to assess security of IP cameras or ONVIF-enabled devices.","ComeOnOliver\u002Fskillshub","ComeOnOliver","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F43215937?v=4","01M6E5JNFECJAAVFE0W7SMWWD2","Haoran Shu","01M6E5JNNDQS7AJZDYFQ8TPZCK",67,"MIT","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Fbrownfinesecurity\u002Fonvifscan\u002FSKILL.md",[],[5,19,20,21,22,23,24,25,26,27,28,29,30],"testing","security scanner","security","authentication","devices","credentials","use","scanner","device","ip","assess","forcing","2026-11-10 10:12:30",false,"---\nname: onvifscan\ndescription: ONVIF device security scanner for testing authentication and brute-forcing credentials. Use when you need to assess security of IP cameras or ONVIF-enabled devices.\n---\n\n# Onvifscan - ONVIF Security Scanner\n\nYou are helping the user scan ONVIF devices for security issues including authentication bypasses and weak credentials using the onvifscan tool.\n\n## Tool Overview\n\nOnvifscan is an ONVIF device security scanner that can:\n- Test for unauthenticated access to ONVIF endpoints\n- Perform credential brute-forcing attacks\n\n## Instructions\n\nWhen the user asks to scan ONVIF devices, test IP cameras, or assess IoT device security:\n\n1. **Determine scan type**:\n   - `auth`: Authentication and access control testing (recommended to start)\n   - `brute`: Credential brute-forcing on password-protected endpoints\n\n2. **Get target information**:\n   - Ask for the device URL\u002FIP\n   - Determine which scan type to run\n   - Check if they have custom wordlists\n\n3. **Execute the scan**:\n   - Use the onvifscan command from the iothackbot bin directory\n   - Format: `onvifscan \u003Csubcommand> \u003Curl> [options]`\n\n## Subcommands\n\n### Auth Scan\nTests ONVIF endpoints for authentication requirements:\n```bash\nonvifscan auth http:\u002F\u002F192.168.1.100\n```\n\nOptions:\n- `-v, --verbose`: Show full XML responses\n- `-a, --all`: Test ALL endpoints including potentially destructive ones\n- `--format text|json|quiet`: Output format\n\n### Brute Force\nAttempts credential brute-forcing on protected endpoints:\n```bash\nonvifscan brute http:\u002F\u002F192.168.1.100\n```\n\nOptions:\n- `--usernames \u003Cfile>`: Custom usernames wordlist (default: built-in onvif-usernames.txt)\n- `--passwords \u003Cfile>`: Custom passwords wordlist (default: built-in onvif-passwords.txt)\n- `--format text|json|quiet`: Output format\n\n## Examples\n\nQuick auth check on a device:\n```bash\nonvifscan auth 192.168.1.100\n```\n\nAuth check with verbose output:\n```bash\nonvifscan auth http:\u002F\u002F192.168.1.100:8080 -v\n```\n\nBrute force with custom wordlists:\n```bash\nonvifscan brute 192.168.1.100 --usernames custom-users.txt --passwords custom-pass.txt\n```\n\n## Important Notes\n\n- URLs can omit `http:\u002F\u002F` - it will be added automatically\n- Auth scan is non-destructive and safe to run\n- Use `-a` flag with caution - may test destructive endpoints\n- Brute force is rate-limited to prevent device overload (max 20 attempts by default)\n- Built-in wordlists located in `wordlists\u002F` directory\n","# Onvifscan - ONVIF Security Scanner\n\nYou are helping the user scan ONVIF devices for security issues including authentication bypasses and weak credentials using the onvifscan tool.\n\n## Tool Overview\n\nOnvifscan is an ONVIF device security scanner that can:\n- Test for unauthenticated access to ONVIF endpoints\n- Perform credential brute-forcing attacks\n\n## Instructions\n\nWhen the user asks to scan ONVIF devices, test IP cameras, or assess IoT device security:\n\n1. **Determine scan type**:\n   - `auth`: Authentication and access control testing (recommended to start)\n   - `brute`: Credential brute-forcing on password-protected endpoints\n\n2. **Get target information**:\n   - Ask for the device URL\u002FIP\n   - Determine which scan type to run\n   - Check if they have custom wordlists\n\n3. **Execute the scan**:\n   - Use the onvifscan command from the iothackbot bin directory\n   - Format: `onvifscan \u003Csubcommand> \u003Curl> [options]`\n\n## Subcommands\n\n### Auth Scan\nTests ONVIF endpoints for authentication requirements:\n```bash\nonvifscan auth http:\u002F\u002F192.168.1.100\n```\n\nOptions:\n- `-v, --verbose`: Show full XML responses\n- `-a, --all`: Test ALL endpoints including potentially destructive ones\n- `--format text|json|quiet`: Output format\n\n### Brute Force\nAttempts credential brute-forcing on protected endpoints:\n```bash\nonvifscan brute http:\u002F\u002F192.168.1.100\n```\n\nOptions:\n- `--usernames \u003Cfile>`: Custom usernames wordlist (default: built-in onvif-usernames.txt)\n- `--passwords \u003Cfile>`: Custom passwords wordlist (default: built-in onvif-passwords.txt)\n- `--format text|json|quiet`: Output format\n\n## Examples\n\nQuick auth check on a device:\n```bash\nonvifscan auth 192.168.1.100\n```\n\nAuth check with verbose output:\n```bash\nonvifscan auth http:\u002F\u002F192.168.1.100:8080 -v\n```\n\nBrute force with custom wordlists:\n```bash\nonvifscan brute 192.168.1.100 --usernames custom-users.txt --passwords custom-pass.txt\n```\n\n## Important Notes\n\n- URLs can omit `http:\u002F\u002F` - it will be added automatically\n- Auth scan is non-destructive and safe to run\n- Use `-a` flag with caution - may test destructive endpoints\n- Brute force is rate-limited to prevent device overload (max 20 attempts by default)\n- Built-in wordlists located in `wordlists\u002F` directory\n",{"name":5,"description":7},"main","def8531e65114c0fca8fb8551c1871ee0eed705c","skills\u002Faiskillstore\u002Fmarketplace\u002Fbrownfinesecurity\u002Fonvifscan",24,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub","https:\u002F\u002Fskillshub.wtf","https:\u002F\u002Fgithub.com\u002FComeOnOliver","AI & Blockchain Engineer\r\n","2026-06-24 22:07:19",{"source":8,"skillName":5,"commands":46,"prompt":56,"zipAvailable":57},[47,50,53],{"tool":48,"command":49},"npx","npx skills add ComeOnOliver\u002Fskillshub --skill onvifscan",{"tool":51,"command":52},"bunx","bunx skills add ComeOnOliver\u002Fskillshub --skill onvifscan",{"tool":54,"command":55},"pnpm","pnpm dlx skills add ComeOnOliver\u002Fskillshub --skill onvifscan","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Fbrownfinesecurity\u002Fonvifscan\u002FSKILL.md",true,[59],{"path":60,"resourceType":61,"resourceTypeDesc":62,"sizeBytes":63,"sourceHtmlUrl":64},"skill-report.json","REFERENCE","参考文档",12471,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Fbrownfinesecurity\u002Fonvifscan\u002Fskill-report.json",[66,80,90,99,105,112],{"skillNo":67,"name":68,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":69,"categories":70,"keywords":76,"publishedAt":31},"01M6FKJN13GMG4KY57J3QD8GY5","model-hierarchy-skill","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzscole\u002Fmodel-hierarchy-skill\u002Fmodel-hierarchy-skill\u002FSKILL.md",[71],{"categoryNo":72,"categoryName":73,"taxonomyType":74,"taxonomyTypeDesc":75},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[77,78,79],"model","model hierarchy","model hierarchy skill",{"skillNo":81,"name":82,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":83,"categories":84,"keywords":86,"publishedAt":31},"01M6FKJJJ6GCAMR4PPPRD12M5X","zoom-mcp","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-mcp\u002FSKILL.md",[85],{"categoryNo":72,"categoryName":73,"taxonomyType":74,"taxonomyTypeDesc":75},[87,88,89],"MCP","zoom","zoom mcp",{"skillNo":91,"name":92,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":93,"categories":94,"keywords":95,"publishedAt":31},"01M6FKJE3KYT3KPEZMEEHYKA6K","zoom-apps-sdk","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-apps-sdk\u002FSKILL.md",[],[96,97,98,88],"sdk","zoom apps sdk","apps",{"skillNo":100,"name":101,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":102,"categories":103,"keywords":104,"publishedAt":31},"01M6FKJ9EDH9Q5VWDF8HAJRSP0","windows","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwindows\u002FSKILL.md",[],[101],{"skillNo":106,"name":107,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":108,"categories":109,"keywords":111,"publishedAt":31},"01M6FKJ666BEEFC3AE9GJ72Q93","whiteboard","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwhiteboard\u002FSKILL.md",[110],{"categoryNo":72,"categoryName":73,"taxonomyType":74,"taxonomyTypeDesc":75},[107],{"skillNo":113,"name":114,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":115,"categories":116,"keywords":117,"publishedAt":31},"01M6FKJ21WFCDGTJQ2Q91T9DVW","websockets","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwebsockets\u002FSKILL.md",[],[114]]