Rating:
http://blog.hacktalk.net/secuinside-2013-secureweb-and-secureweb-revenge-writeup/
I don't remember