(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
password spreadsheet
Bypass users in DUO
Unlicensed
hardware or software
No SPF record
untrained clickers
Individual user permissions in shares
Wireless PSK older than 2 years
unencrypted backups
Computers
not
joined to
AD (or AAD)
Stale users older than 1year
Telnet
compliance violation
Default admin credentials
Segmentation without ACLs
LLMNR enabled
Winlogon cache default value
Insecure share with PII/PHI
min password length < 12 characters
PCI violation
End user
Passwords that never expire
Whitelisted domains in email filter
Plain text password discovered in share
EDR
Missing on endpoint
password complexity not enforced
Windows XP
>20% phish click rate
No MFA on
365 Admin
"Domain Users" group as local administrator
NIPS
disabled
/unconfigured
cpassword
Adobe Flash
Application
with > 1000 vulnerabilities
unauthenticated
mail relay
Default SNMP Write value
SMB signing
not enabled
No Geo-IP blocking
legacy configuration
not removed
Windows Server 2003/2008
VM without autostart
No DMZ
(where appropriate)
VPN with weak encryption
No botnet
filter
DNS logging not enabled
Inapproprite Firewall rules (not RDP)
rogue device
Windows 7
inappropriate unconstrained delegation in Active Directory
