We participated in the first edition of the Deutsche Hacking Meisterschaft in Bonn.

Exploiting a zero-day SQL injection

Exploiting CBC-mode encryption and messy JSON parsers

Exploiting open Websockets

Exploiting a webserver using only python modules