Meet Plum, the challenge of your own ASR for free
2025-10-22 , Europe

For a medium company, ASR (Surface Surface Reduction) is a good challenge. Of course, A lot of paid services, Shodan, Onyphe, Censis, Qualys...are available. But how to orchestrate your own simple and small recon for less than 25000€ yearly :) ?
Now.. With NIS2, How to do this if you are a National CSIRT.


Plum is a young developpement of CIRCL D4 project. With simple agent deployement in mind. The goal of this lighting talk is to talk about the Luxebourgish IP space.
I will Explain the Challenges of scanning the IP Space. and show some funny results and effective use case that we had after just 2 weeks of production.
But the real goal of this talk is to collect interest, need of people, and why not, some pull request too.

Paul Jung is since a long time a security enthusiast. He works in the security field in Luxembourg since more than a decade. During this time, Paul has covered operations as well as consulting within various industries. He possesses a wide range of skills and experiences that enable him to perform multiple roles from offensive security audit to security incident handling. Since recently he moves to CIRCL and start to have fun there.