I participated with penthackon. It was a blast.
Writeup for secops in directory. Some of the things I coded to help solve the others (except sweet) but I am a bit lazy to writeup.
Vulture was a file exists
exploited with phar://
with an Object Deserialization Code Execution Vulnerability in Phalcon.