domains / families / security / scada-hikvision-isapi

scada-hikvision-isapi

separate

Enumerate Hikvision ISAPI endpoints on SCADA and IoT web interfaces.

When to use

A web interface on a non-standard port (443, 8443, 9443) loads a large JavaScript bundle with references to `/ISAPI/`, `Bumblebee`, or `Streaming/channels`.
Port scan reveals RTSP (554), ONVIF (8899), or Hikvision-specific ports (8000, 9010).
The server header or SSL certificate references Hikvision, HikCentral, iVMS, or Pyramid.
A target has industrial/energy/infrastructure context where SCADA systems are likely.
The web client loads `Common/common.js`, `Common/components.js`, or `Common/vendorGraph.js` from a relative path.

Repository	Path
uphiago/recon-skills	`recon/scada-hikvision-isapi/SKILL.md`