Exploits we've used at the Easterpwn CTF - http://easterpwn.de/