2026 Scavenger Bingo Challenges

Info about the 2026 Scavenger Bingo Challenge is here.

Hand your evidence it at the Scavenger Bingo desk. Unless stated the evidence is normally photo or video format.

HTTP ONE point 1 Must Die – Swig port (or something that looks vaguely like port) with PortSwigger (port or port-lookalike not provided!)
One little Duck, Number 2 – Find a rubber duck (toy or USB)
Tib-3-ruis – Like and Subscribe. On any platform he is active, increase Tib’s follower account by 3
Number 4, Knock at the door – Film one of your team giving a guerilla pop-up talk to at least 4 people (who aren’t on your team) on the basics of Port Knocking.
CAT 5 -Take a pic of any vendor wearing an article of clothing or hair accessory (facial hair counts) you’ve made from network cable
Number 6, Chopsticks – Video one of your team playing chopsticks on a public piano
Lucky number 7 – Celebrate the luck of the Irish, but getting a picture of someone holding an Ivory Coast Flag
Two-0h-8 – Successfully hack Minty’s Peugeot 208 in-a-box in the car hacking village (don’t worry, he’ll guide you through it)
9 Lives – Take a photo of someone wearing cat ears (with permission)
Number 10, Hacker’s Den – Find somebody wearing a plain black hoody with NO branding
Legs 11 -Take a picture containing exactly 11 legs, all bare below the knee
1 and 2, Straight on through – Video a walk from Track 1 to the Viliages Room via Track 2, The AMA desk and the vendor hall. Speed up the footage, so it’s exactly 12 seconds long,
Unlucky for some, 13 – Write a breach notification statement for a fake company website and host it online
One-four for-a-copy – Video the team receiving a message on 27Mhz (CB Radio)
DC 15-One – Get a selfie with anyone wearing DC151 swag
Sweet 16-bit – Get any 16-bit device to display “BSides Leeds 2026”
17, Dancing Queen – Photograph one of your team with one of Leeds many drag artists, or an Abba impersonator
Coming of Age, 18 – Do something it’s only legal to do once you’re 18 (unless you’re under 18, in which case pretend to do something, but don’t actually do it!).
N-n-n-n-nineteen 19 (80s) – Recreate an iconic 1980s album cover.
Natural 20s – Video one of your team rolling a natural 20 whilst Dual Core’s Natural 20s plays in the background
Key to door, 21 -Video one of your team sucessfully picking a lock at the Lockpicking village
Sock-it-two-two-me. Get a picture of one of the team in odd socs, but the left sock MUST be a Pentest Partners branded sock.
2 and 3, Port 23 – Record yourself telneting into an active BBS and leave a message there!
Only in Yahtzee – Film yourselves getting a Yahtzee full house.
2 and 5, Port 25 Shenanigans – Film a team member sending an email by via a telnet/nc connection to port 25
2 and 6, Pick and Mix – Source at least 100g of pick and mix, and convince a crew member to eat it all, on video
Gamer/Math Heaven – Obtain a score in a video game that is a multiple of 27!
You Essay – Write a short story of no more than 150 words.
2 and 9, Rise and Shine – Get one team member to take a selfie in a bed, with a coffee
3 and 0 , QR Co (des) – Hand draw a working QR code
3 point 1 is Pi! – Make an edible Raspberry Pi
3,2, Buckle My Shoe – Photo of somebody wearing shoes with a buckle. The shoes may not belong to the wearer.
3 and 3, Dirty Knees – Video a minimum of one team member performing a knee-slide of at least 2 metres.
Talk the Torq, with Torq – Get a pic with the people at the Torq,io stand (or failing that, with some Torq.io promotional material)
3 and 5, 35 … pence – Get a till reciept showing you spent exactly 35p, not a penny more or less.
3 and 6 Trace-a-bit. Trace something with the Tracebit folks (or trace some of their promotional material).
13.37 – Photograph one of your team holding exactly 13.37 in any currency that isn’t Pounds / Sterling.
3 and 8 A M A-yt – Ask the AMA desk something they won’t give you info about”
39 Steps – Video your group performing any Steps! song (with dancing) on public steps
40 Net – Evidence one of your team logging into any FortiNet product.
Stickers for everyone – Donate at least one sticker to the sticker stall and stick a BSides Leeds sticker on something you own and display it proudly in a public place (do NOT sticker the venue!)
42 – The answer to The Life, The Universe and Everything – Get a photo of a team member carrying the Douglas Adams Hitchhikers triology, a towel and no tea.
T-h 4 t-S 3 c…. WTF. Get a selfie with one of the Th4tsS3cur1ty.company team.
All the 4s – Beats the odd of 216 to 1, and roll 3 BSides Leeds dice of different colour at get all three to come up a 4! Video evidence.
4 and 5, Half Way There – As a group, perform a Bon Jovi tribute, singing Living on a Prayer, and film it.
4 and 6 Up to tricks – Video you or one of your team successfully performing a magic trick
4 and 7, Incident Heaven – Create a 30 second video of you playing Backdoors & Breaches with other people.
Spectrum 48k – Make a rainbow (any way you want)
PC (World) 49 – As PC World is now Curry’s. Wear a PC’s helmet outside a Curry House
5,0, Half a Century – Film one of your team hitting a six with a cricket bat, and then being caught out.
5 and 1 Tweak of the Thumb – Video yourself explaining to somebody who is not a conference attendee, that you are hacker at a hacker conference. Then get them to plug a USB thumbdrive of yours into a device of theirs.
52 Card Pickup – Film one of you team performing the classic 52 Card Pickup “trick” on an unsuspecting participant
Port 53 – It’s always DNS ! Make a LinkedIn post explaining why it IS always DNS at fault
5 and 4, Clean the Floor – Video one of the team using either a brush, broom, mop & bucket or floor polisher to clean the floor of an indoor public building that isn’t Cloth Hall Court
55, Gordons Alive – Film one of your team shouting “Gordon’s Alive!” in an unexpected location!
Awareness Tricks – Complete this sentence “I like my lovers like I like my login credentials…” ,turn it into a sign, then get a picture of a speaker holding the sign
57 Heinz Varieties – Get a picture of your team, outside the Leeds City Varieties, with any Heinz product
5 and 8 Annihilate! – Video your team winning a round of BattleBots.
5 and 9, the Bristol Line – Get a picture of your team, with any BSides Bristol Crew Member (or any other BSides held in a town that begins with B) or Swag item from there
2 60 0 – Get a selfie with anyone wearing 2600 swag
6 and 1 Bakers Bun – Get a pic of any member of any team member wear any items of a Greggs uniform (must be branded)
6 and 2 Clickerty Duck – Make (and film) a clicking duck, or a ducking click
6 and 3 Intigriti – Picture evidence of one of your team beating the Integriti AI challenge
Nintendo 64 – Film yourselves playing Mario Kart on an N64
Old Age Pension – Video grom telling you how old he is.
Clickerty Click 66 – Video a mechanical keyboard generating at least 66db.
Six Seven – Film at least 5 people(all old enough to know better) saying Six-Seven, like a bunch of kids
6 and 8, Saving Grace – Find somebody called Grace (and prove it) and Save Them!
Sixty-Nine Dudes! – Video your team recreating any scene from Bill & Ted’s Excellent Adventure
Port 70 Before the Web – Get a gopher server to serve and image of Gordan the Gopher
7 and 1, Bang the drum – Play a drum in an unexpected place
7 and 2, Hacker Haiku – Make a live recording of an original Hacker Haiku
7 and 3, Explain it back to me – Give a lightning talk, summarising a speakers talk, presented to the speaker of the talk that the lightning talk is summarising
7 and 4 Hit The Floor – Show us evidence of your team finding a dancefloor and using it
75 Professionals Strive – Make a LinkedIn post starting ‘Everything I needed to know about B2B marketing, I learnt (or learned) from doing the BSides Leeds Scavenger Bingo. Evidence that it has at least 20 likes from people not at the conference
76 Trombones – Film any team member playing a trombone in a public place
77 Reverse (Sunset) Strip – Get a pic of one of your team wearing 7 hoodies
7 and 8, its’ never too late – Do a git push / commit dated today to a repo that hasn’t has a commit in over a year
7 and 9 – One more time – Publish an instagram video with Daft Punk’s one more time as the backing music, with a least one speaker, one vendor and one volunteer being daft with the Punk Security BSides Leeds badge
Semgrepping Weird! – Bring Katie from Semgrep the weirdest things you can find, only Katie can decide if it’s weird enough. If it is, get a pic with Katie showing both the appreciation for the weird thing, and the thing itself.
81, Time for Fun – Plan a game to play at a B-sides event, explain the rules in at least 20 seconds.
8 and 2, Me and You – Find another attendee with a similar career origin story and tell the story as if you’re twins
8 and 3, Time for Tea – Make any crew member or speaker a cup of tea, and thank them for getting out of bed today
Eighty Fourr, Cyberr – Sign up to Cyberr.ai using the QR code (on their pull-up banner). Join the BSides Leeds Group and make a post featuring a pic of your team
Staying Alive – Get a screenshot of a linux/unix box showing the uptime command shows an uptime of greater than one year!
x 86 – Film a team member holding an x86 processor, NOT connected to a motherboard
8 and 7, TOR-key in Devon – Provide the address and public key of a .onion site that mentions BSides Leeds
Eleven Bites. Video a team member eating a sandwich in exactly 11 bites
8 and 9, Swag Design – Collect or craft a unique piece of vendor swag
Top of The Shop – Photograph of a team member on top of a shop