UnauthorizedNFSWrongIPs/HostsprovidedUnauthorizedDoS FeatureSQLInjectionYour testmachinecrashesOutdatedSoftwarewith knownvulnsWeb APPhas a(good)FirewallXSS withAdminBotSSRFFormatStringInjection0TechnicalCustomersCommandInjection0Vulnerabilities4 Hours+FinalCallRCE Exploitworks onmultipleHosts20+CritsUnauthorizedSMB0 CustomerResponsesduring theTestAccess toExampleReportsDefaultCredentialsEnvironmentis brokenUnauthorizedFTPUnauthorizedDatabaseOnly 1VPNconnectionUnauthorizedNFSWrongIPs/HostsprovidedUnauthorizedDoS FeatureSQLInjectionYour testmachinecrashesOutdatedSoftwarewith knownvulnsWeb APPhas a(good)FirewallXSS withAdminBotSSRFFormatStringInjection0TechnicalCustomersCommandInjection0Vulnerabilities4 Hours+FinalCallRCE Exploitworks onmultipleHosts20+CritsUnauthorizedSMB0 CustomerResponsesduring theTestAccess toExampleReportsDefaultCredentialsEnvironmentis brokenUnauthorizedFTPUnauthorizedDatabaseOnly 1VPNconnection

BINGO!!! - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. Unauthorized NFS
  2. Wrong IPs/Hosts provided
  3. Unauthorized DoS Feature
  4. SQL Injection
  5. Your test machine crashes
  6. Outdated Software with known vulns
  7. Web APP has a (good) Firewall
  8. XSS with Admin Bot
  9. SSRF
  10. Format String Injection
  11. 0 Technical Customers
  12. Command Injection
  13. 0 Vulnerabilities
  14. 4 Hours+ Final Call
  15. RCE Exploit works on multiple Hosts
  16. 20+ Crits
  17. Unauthorized SMB
  18. 0 Customer Responses during the Test
  19. Access to Example Reports
  20. Default Credentials
  21. Environment is broken
  22. Unauthorized FTP
  23. Unauthorized Database
  24. Only 1 VPN connection