REWE digital Events | Cologne & other locations

Location:
REWE digital, Schanzenstraße 6-20, 51063 Köln, Building 2.20, First Floor (Arena Neon)
Free parking available at parking spots around the building. Closest public transport stations are "Keupstraße", "Wiener Platz" or "Bahnhof Köln Mülheim".

We as REWE digital are proud to host you, folks. Let's continue were we left off in January 2026 with a lively conversation and an engaged audience in our cozy offices in Cologne-Mülheim. See you soon!

All Genders welcome. We speak English, German and Code!

We can't wait to see you at our November event, hosted at REWE digital Cologne-Mülheim.

🏢 Location:
REWE digital, Schanzenstraße 6-20, 51063 Köln, Building 2.20 (1st floor)
Free parking available at the "REWE digital"-Carlswerk parking spots around the building.

🌈All Genders and Ages welcome!
We speak English and German during this Meetup.

This event will be only in-person. Please check PyCologne's code of conduct and official health regulation in Germany before coming. If you feel some signs of sickness, please consider skipping this event and attending another time. We will have plenty of events in different formats in the future.

REWE digital. Part of REWE Group.

*****Please note: This is the same event as this one. Please register either here or there. Thank you! *****

OWASP COLOGNE is back at REWE digital 🐝

As always: Location, Food and Drink hosted by REWE digital.
Talks and Content by OWASP Cologne members. Hosts: Katherine & Lars.

Doors open: 6:30pm
Start: ~7:00pm

TALK OF THE DAY
Exposed by Design - Katherine Leese
Host header attacks, access control bypasses, SSRF. You've probably seen them in Burp, maybe exploited them in a lab. But what do they actually look like on the wire? Is anyone even looking?

This talk flips the perspective. Using a fictional scenario and a purpose-built Docker lab, we'll walk through five live attack chains, from SNI/Host mismatches to blind SSRF, and watch each one unfold in Wireshark packet captures. No decryption needed.
Modern web infrastructure routes on application-layer content (Host headers, X-Forwarded-For, URL paths), not IP addresses. TCP got you to the right box. Everything after that is just strings the next hop believes.

The rules are different in this upstream space. What's hidden behind TLS in Burp is plaintext between internal hops, and what looks like one request in the browser can split into traffic on interfaces nobody monitors.

----------

Adress:
REWE digital, Schanzenstraße 6-20, 51063 Köln, Gebäude 2.20, 1st floor

How to get here:
We recommend using public transportation to get here. For example, take KVB Line 4 to Keupstraße. From there, it’s about a 10-minute walk to REWE digital. From the Köln-Mülheim train station, the walk takes about 15 minutes. If you do end up coming by car, you can use the designated parking spaces on the REWE digital grounds for free.

Notes:

• Please update your RSVP if you can’t make it.
• We speak (at least) German, English, and code.
• Come as you are 🌈All Genders welcome.

REWE digital. Part of REWE Group.

----------

About Katherine:
Katherine is a tech professional with 4 years of experience, having retrained in her 40s to become a Computer Expert, specialising in System Integration. Originally from New Zealand, she is currently based in Germany. During her training, she undertook a practicum at SevenShift, a boutique IoT cybersecurity company in Cologne that recognised her enthusiasm, ultimately hiring her. She is now honing her skills and contributing to the company's security initiatives. Outside of her professional life, Katherine is a dedicated single mother to a teenager. She is a member of the Haecksen, the FINTA branch of the CCC, a Chapter Leader of OWASP Cologne, and is currently studying for the Burp Suite certification.

About OWASP:
The Open Worldwide Application Security Project (OWASP®) is a 501(c)(3) worldwide not-for-profit charitable organization focused on improving the security of software. Our mission is to make software security visible so individuals and organizations can make informed decisions. OWASP is uniquely positioned to provide impartial, practical information about AppSec to individuals, corporations, universities, government agencies, and other organizations worldwide. Operating as a community of like-minded professionals, OWASP issues software tools and knowledge-based documentation on application security.

*****Achtung: Dies ist das selbe Event wie dieses hier. Bitte meldet euch entweder hier bei uns auf Meetup oder drüben auf Luma an. Danke! *****

Nach dem Meetup ist bekanntlich vor dem Meetup. Alle, die am 18.9. vor Ort waren: Ihr wisst Bescheid. Alle, die noch nicht dabei waren: Markiert's euch im Kalender. Unser 3. Home Assistant-Meetup in Köln findet noch im Dezember 2026 statt!

Es gilt wie immer: REWE digital stellt Location, Snacks, Drinks und einen Talk; der Rest ist to be defined.

Doors open: 18:00 Uhr
Start der ersten Talks: ~18:30 Uhr

​Talk of the day:
Für das kommende Meetup suchen wir noch nach spannendem Input. Das Thema ist bisher komplett offen, was bedeutet: Ihr könnt das Programm aktiv mitgestalten. Wer Lust hat, der Community etwas zu präsentieren – ob umfangreiches Projekt oder nur ein kurzer Impulsvortrag –, schreibt mir einfach eine formlose Mail an meetup@smarterkram.de. Wir finden garantiert den passenden Rahmen für euer Thema.

Bis bald
Olli & Felipe von REWE digital

Adresse:
REWE digital, Schanzenstraße 6-20, 51063 Köln, Gebäude 2.20, 1. Etage

***

Anfahrt:
Wir empfehlen die Anreise mit öffentlichen Verkehrsmitteln. Zum Beispiel mit der KVB-Linie 4 bis Keupstraße. Von dort sind es ca. 10 Minuten Fußweg zu REWE digital. Vom Bahnhof Köln-Mülheim dauert der Fußweg etwa 15 Minuten. Falls ihr doch mit dem Auto kommt, könnt ihr die ausgewiesenen Parkplätze auf dem Gelände von REWE digital kostenlos nutzen.

Anmerkungen:

• Bitte passe deine RSVP an, wenn du nicht kommen kannst.
• Wir sprechen (mindestens) Deutsch, Englisch und Code.
• Komm, wie du bist 🌈All Genders and Ages welcome!
• Sag' es weiter! :-)

REWE digital. Part of REWE Group.