Onvifscan - ONVIF Security Scanner

You are helping the user scan ONVIF devices for security issues including authentication bypasses and weak credentials using the onvifscan tool.

Tool Overview

Onvifscan is an ONVIF device security scanner that can:

• Test for unauthenticated access to ONVIF endpoints
• Perform credential brute-forcing attacks

Instructions

When the user asks to scan ONVIF devices, test IP cameras, or assess IoT device security:

1. Determine scan type:
   • auth: Authentication and access control testing (recommended to start)
   • brute: Credential brute-forcing on password-protected endpoints