IoT Camera Recon Skill

IP camera assessment covering RTSP exposure, vendor configuration endpoints, ONVIF service enumeration, authentication controls, and firmware identification.

When to Use

• port-mass-scan finds RTSP (554) or camera HTTP ports (80, 8010, 8011).
• Target is a physical security company, traffic management, or government surveillance.
• Shodan search reveals camera devices in the target's IP range.
• After port-service-discovery finds Axis/Hikvision/Dahua ONVIF services.

Prerequisites

• terminal with curl, python3.
• For mass scanning: masscan or RustScan (see port-mass-scan).
• VLC or ffmpeg for stream verification (optional).