Nearly 50 students from two universities hacking, discussing, and learning from one another: Last semester, the Hacker Contest was held jointly at TU Darmstadt and Hochschule Darmstadt (h_da) for the first time.
This brought together more participants than ever before. The benefits of the joint format became particularly clear during the final event at h_da: The students presented various APT groups and their approaches and discussed their findings with the entire group. Our colleagues Matthias Göhring, Tobias Hamann, and Tim Wörner led the course again this semester.
Practical exercises were, of course, also part of the program. During the hands-on hacking sessions, the students were able to test their skills on virtual machines. The subsequent practical assignment focused on real Open Source software and the search for previously undiscovered vulnerabilities. Practical hacking experience and the responsible handling of identified vulnerabilities have been part of the Hacker Contest for several semesters.
22 Vulnerabilities in 15 Open Source Projects
The results of the practical assignment: 22 reported vulnerabilities across 15 Open Source projects. The students reported their findings to the respective development teams as part of a Responsible Disclosure process.
This means the assignment has an impact beyond the Hacker Contest itself. The students apply their knowledge to real software while contributing to its security at the same time. For many semesters, searching for real vulnerabilities and reporting them responsibly have been key components of the practical assignment.
We are particularly pleased that the practical assignment makes a very tangible contribution to #moresecurity every semester. The students not only demonstrate what they have learned. With their findings, they directly help make Open Source software more secure.
Tobias Hamann, Managing Consultant IT Security, usd AG
Following the successful premiere, we will continue the Hacker Contest as a joint format between TU Darmstadt and h_da. And the next round is already underway: Since 20 October 2026, students have once again been tackling the practical assignments as part of the winter semester. The write-up for this year’s registration challenge will follow shortly.
