Rip out nm and play with your network. Set up a mini infrastructure at home.

Believe in yourself you can do it, there's quite a lot of resources on the net; videos, pdf, powerpoint, text files the list is not exhaustive but of course it has to be ignited by You.

If you know there is a difference between say a "console" and a "terminal" regardless of how "other people" use those terms.
then you should be ok.

16 videos in this playlist
https://docs.kali.org/category/introduction
https://github.com/Security-Onion-So...onion/wiki/FAQ
http://www.linuxhomenetworking.com
https://www.linuxquestions.org/quest...erences-45261/
https://kali.training/


Have Fun!

1 members found this post helpful.

How about if you combine the two, "terminal console"?

Good references below:
https://mikrotik.com/testdocs/ros/2.9/guide/console.php
https://superuser.com/questions/1446...google_rich_qa

I've worked in security for awhile and have done some pen testing. I would recommend trying to get a job in a SOC or a small MSSP. It's not glamorous but it's a good foot in the door to the better things.

Sorry, what is a SOC or MSSP?

What I wanted to know is if there are things I could do that would land me some side work in this area.

For instance, if I got a Certified Ethical Hacker or Security+ cert, would that give me enough skills to get an entry-level job or be able to do side work so I can then gain real-world experience?

(Most roles in IT have to have some entry point that is attainable. If you wanted to be a web developer, you'd need to know HTML, CSS and Javascript. And if you knew those, you could probably make some $$$ using those skills.)

So how can I do that with Security and Penetration Testing?

It's a bit different with security. Not a lot of people want to hire someone just starting out to work with sensitive materials and processes. Not a lot of part time work doing this either. Especially if they can be fined if you screw up. SOC is a Security Operations Center and MSSP is a Managed Security Services Provider. If you're really serious I would recommend getting those certs and working for an MSSP. Certs don't matter as much as experience.

Are those basically web hosting companies?

I get what you're saying, but what about for smaller businesses?

There must be some things I could learn to help small businesses and non-profits be more secure and maybe make some side income so it becomes "real" experience.

Maybe installing firewalls?

Basic network hardening?

Penetration testing on company websites (e.g. Bob's Plumbing, Mary's Cakes & Cookies)?

Installing encrypted drives?

Patching systems?

I hate every word you said.

Get some!

Yeah you could probably get a few gigs doing freelance type work and put it on your resume. Don't mind me, I'm a pessimist so I can find a lot of ways where it wouldn't work but doesn't hurt to try.

No one is going to let you pen test until they know they can trust you. Download metasploit framework, john and openvas. Learn how to use those, netcat, nmap, dsploit, and spoof. That's a good start.

Small law enforcement agencies and private investigators that can't afford their own full-time data-forensics staff often hire freelancers, You must be good with smart phones though, and that requires financial investment, XRY by MSAB.

You can also pick up a cracker for locked hard drives from Vogon UK.

Hi AwesomeMachine,

Sounds like you've been down the road.