REWE digital Events | Cologne & other locations

Location:
REWE digital, Schanzenstraße 6-20, 51063 Köln, Building 2.20, First Floor (Arena Neon)
Free parking available at parking spots around the building. Closest public transport stations are "Keupstraße", "Wiener Platz" or "Bahnhof Köln Mülheim".

We as REWE digital are proud to host you, folks. Let's continue were we left off in January 2026 with a lively conversation and an engaged audience in our cozy offices in Cologne-Mülheim. See you soon!

All Genders welcome. We speak English, German and Code!

Game Narrative Meetup Cologne is a get-together where we talk about story-focussed games and dive deep into our own exciting game projects. We first met on August 26 during Gamescom - and here we are again! :-)

On November 18th, Pragya Mukherjee (CEO and Creative Director, Papercoda Games) will lead a discussion about "Choice vs Control - How to rein in the combinatorial explosion problem of choice-based narrative systems".
She summarises her research on modular narrative systems - the theory, the frameworks, the games - and details her own challenges in crafting the narrative for her game "Media Circus" before opening the discussion on known and potential ways to fulfil the promise of interactive digital narratives - offering true responsiveness and flexibility without losing impact or meaning.

Pragya has 5+ years of experience crafting modular narrative systems for games and has written a thesis on the subject. She likes experimenting with new forms of storytelling afforded by the digital medium at her studio Papercoda Games where she's currently developing the narrative-sandbox game Media Circus.

**

Agenda:
18:00 Doors open (welcome, food, drinks and networking)
~18:45 Program starts
21:00 Doors close

Location:
REWE digital, Schanzenstraße 6-20, 51063 Köln, Building 2.20, 1st floor

How to get here:
For example, take KVB Line 4 to Keupstraße (10 mins from Köln Messe Deutz) From there, it’s about a 10-minute walk to REWE digital. From the Köln-Mülheim train station, the walk takes about 15 minutes. If you do come by car, you can use the designated parking spaces on the REWE digital grounds free of charge.

Our Arena Neon is reachable by wheelchair users. The Carlswerk area itself is not-so-wheelchair-friendly though, because it's a former cable factory.

Notes:

• Please cancel your RSVP if you cannot attend, because space is limited.
• There will be no alcohol on the premises.
• We speak (at least) German, English and Code.
• Come as you are, 🌈All Genders and Ages welcome!
• Tell your friends! :-)

This event will be only in-person. If you feel some signs of sickness, please consider skipping this event and attending another time. We will have plenty of meetups in the future.

REWE digital. Part of REWE Group.

We can't wait to see you at our November event, hosted at REWE digital Cologne-Mülheim.

🏢 Location:
REWE digital, Schanzenstraße 6-20, 51063 Köln, Building 2.20 (1st floor)
Free parking available at the "REWE digital"-Carlswerk parking spots around the building.

🌈All Genders and Ages welcome!
We speak English and German during this Meetup.

This event will be only in-person. Please check PyCologne's code of conduct and official health regulation in Germany before coming. If you feel some signs of sickness, please consider skipping this event and attending another time. We will have plenty of events in different formats in the future.

REWE digital. Part of REWE Group.

*****Please note: This is the same event as this one. Please register either here or there. Thank you! *****

OWASP COLOGNE is back at REWE digital 🐝

As always: Location, Food and Drink hosted by REWE digital.
Talks and Content by OWASP Cologne members. Hosts: Katherine & Lars.

Doors open: 6:30pm
Start: ~7:00pm

TALK OF THE DAY
Exposed by Design - Katherine Leese
Host header attacks, access control bypasses, SSRF. You've probably seen them in Burp, maybe exploited them in a lab. But what do they actually look like on the wire? Is anyone even looking?

This talk flips the perspective. Using a fictional scenario and a purpose-built Docker lab, we'll walk through five live attack chains, from SNI/Host mismatches to blind SSRF, and watch each one unfold in Wireshark packet captures. No decryption needed.
Modern web infrastructure routes on application-layer content (Host headers, X-Forwarded-For, URL paths), not IP addresses. TCP got you to the right box. Everything after that is just strings the next hop believes.

The rules are different in this upstream space. What's hidden behind TLS in Burp is plaintext between internal hops, and what looks like one request in the browser can split into traffic on interfaces nobody monitors.

----------

Adress:
REWE digital, Schanzenstraße 6-20, 51063 Köln, Gebäude 2.20, 1st floor

How to get here:
We recommend using public transportation to get here. For example, take KVB Line 4 to Keupstraße. From there, it’s about a 10-minute walk to REWE digital. From the Köln-Mülheim train station, the walk takes about 15 minutes. If you do end up coming by car, you can use the designated parking spaces on the REWE digital grounds for free.

Notes:

• Please update your RSVP if you can’t make it.
• We speak (at least) German, English, and code.
• Come as you are 🌈All Genders welcome.

REWE digital. Part of REWE Group.

----------

About Katherine:
Katherine is a tech professional with 4 years of experience, having retrained in her 40s to become a Computer Expert, specialising in System Integration. Originally from New Zealand, she is currently based in Germany. During her training, she undertook a practicum at SevenShift, a boutique IoT cybersecurity company in Cologne that recognised her enthusiasm, ultimately hiring her. She is now honing her skills and contributing to the company's security initiatives. Outside of her professional life, Katherine is a dedicated single mother to a teenager. She is a member of the Haecksen, the FINTA branch of the CCC, a Chapter Leader of OWASP Cologne, and is currently studying for the Burp Suite certification.

About OWASP:
The Open Worldwide Application Security Project (OWASP®) is a 501(c)(3) worldwide not-for-profit charitable organization focused on improving the security of software. Our mission is to make software security visible so individuals and organizations can make informed decisions. OWASP is uniquely positioned to provide impartial, practical information about AppSec to individuals, corporations, universities, government agencies, and other organizations worldwide. Operating as a community of like-minded professionals, OWASP issues software tools and knowledge-based documentation on application security.