Web APP has a (good) Firewall 20+ Crits 4 Hours+ Final Call Unauthorized DoS Feature Environment is broken XSS with Admin Bot Unauthorized NFS SSRF Default Credentials Outdated Software with known vulns 0 Customer Responses during the Test SQL Injection RCE Exploit works on multiple Hosts Only 1 VPN connection Format String Injection Command Injection 0 Vulnerabilities Unauthorized FTP Unauthorized Database Your test machine crashes 0 Technical Customers Wrong IPs/Hosts provided Access to Example Reports Unauthorized SMB Web APP has a (good) Firewall 20+ Crits 4 Hours+ Final Call Unauthorized DoS Feature Environment is broken XSS with Admin Bot Unauthorized NFS SSRF Default Credentials Outdated Software with known vulns 0 Customer Responses during the Test SQL Injection RCE Exploit works on multiple Hosts Only 1 VPN connection Format String Injection Command Injection 0 Vulnerabilities Unauthorized FTP Unauthorized Database Your test machine crashes 0 Technical Customers Wrong IPs/Hosts provided Access to Example Reports Unauthorized SMB
(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.
Web APP has a (good) Firewall
20+ Crits
4 Hours+ Final Call
Unauthorized
DoS Feature
Environment is broken
XSS with Admin Bot
Unauthorized NFS
SSRF
Default Credentials
Outdated Software with known vulns
0 Customer Responses during the Test
SQL Injection
RCE Exploit works on multiple Hosts
Only 1 VPN connection
Format String Injection
Command Injection
0 Vulnerabilities
Unauthorized FTP
Unauthorized Database
Your test machine crashes
0 Technical Customers
Wrong IPs/Hosts provided
Access to Example Reports
Unauthorized SMB