UnauthorizedSMBSQLInjection0Vulnerabilities20+CritsSSRF0 CustomerResponsesduring theTestCommandInjectionWeb APPhas a(good)FirewallRCE Exploitworks onmultipleHostsYour testmachinecrashesEnvironmentis brokenAccess toExampleReportsOnly 1VPNconnectionUnauthorizedNFSWrongIPs/HostsprovidedUnauthorizedFTP4 Hours+FinalCallUnauthorizedDatabase0TechnicalCustomersDefaultCredentialsOutdatedSoftwarewith knownvulnsXSS withAdminBotUnauthorizedDoS FeatureFormatStringInjectionUnauthorizedSMBSQLInjection0Vulnerabilities20+CritsSSRF0 CustomerResponsesduring theTestCommandInjectionWeb APPhas a(good)FirewallRCE Exploitworks onmultipleHostsYour testmachinecrashesEnvironmentis brokenAccess toExampleReportsOnly 1VPNconnectionUnauthorizedNFSWrongIPs/HostsprovidedUnauthorizedFTP4 Hours+FinalCallUnauthorizedDatabase0TechnicalCustomersDefaultCredentialsOutdatedSoftwarewith knownvulnsXSS withAdminBotUnauthorizedDoS FeatureFormatStringInjection

Untitled Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. Unauthorized SMB
  2. SQL Injection
  3. 0 Vulnerabilities
  4. 20+ Crits
  5. SSRF
  6. 0 Customer Responses during the Test
  7. Command Injection
  8. Web APP has a (good) Firewall
  9. RCE Exploit works on multiple Hosts
  10. Your test machine crashes
  11. Environment is broken
  12. Access to Example Reports
  13. Only 1 VPN connection
  14. Unauthorized NFS
  15. Wrong IPs/Hosts provided
  16. Unauthorized FTP
  17. 4 Hours+ Final Call
  18. Unauthorized Database
  19. 0 Technical Customers
  20. Default Credentials
  21. Outdated Software with known vulns
  22. XSS with Admin Bot
  23. Unauthorized DoS Feature
  24. Format String Injection