(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
No DMZ
(where appropriate)
No backup
failure alerts
VM without autostart
GPO with insecure settings
untrained clickers
rogue device
Teamviewer / VNC
Unlicensed
hardware or software
LM Hash on admin
Wireless PSK older than 2 years
cpassword
>20% phish click rate
Insecure share with PII/PHI
Windows Server 2003/2008
insecure zone transfers
Application
with > 1000 vulnerabilities
SMB signing
not enabled
Whitelisted domains in email filter
No SPF record
unencrypted web management interface
min password length < 12 characters
Windows 7
Users are local admins
Bypass users in DUO
No Geo-IP blocking
NIPS
disabled
/unconfigured
No botnet
filter
critically out-of-date firmware
Segmentation without ACLs
Guest SSID but no guest isolation
No MFA on
365 Admin
Inapproprite Firewall rules (not RDP)
password spreadsheet
password complexity not enforced
Default admin credentials
Adobe Flash
No DKIM / DMARC
compliance violation
inappropriate unconstrained delegation in Active Directory
