Everybody come rep @The Wave for taking the time to help a Coli Breh in need :mjcry:

Afro

Student of life
Supporter
Joined
Feb 8, 2016
Messages
12,355
Reputation
6,600
Daps
52,721
Nah i'm a Systems Engineer and former Network Engineer. @bdizzle is the Security gawd :wow:

I do IT security.

Security is a VERY wide field, and I am interviewing a lot of potential employees with years of experience and more certs than me, makes me realise certifications aren't shyt. The clue is in the name, they are meant to CERTIFY you know something. So a lot of people put the cart before the horse is the wrong thing.

If anyone wants to get into security 1st, I say to some form of networking education with hands on experience e.g. CCNA - learn what ICMP is, learn the TCP headers, know what value is in an IP header to indicate a TCP packet is coming next. Then understand how Windows and Linux works. Install the OS's on a VM and get playing. Then figure out if you want to go down the red side - then learn how the internet works e.g. HTTP headers, CGI, how Javascript works, learn SQL and how to inject code, learn XSS, CSRF, etc. Or come down to the blue side - learn how malware works, learn to deconstruct it, learn what DLL's it loads (interject with learning how Windows works)

There is no 1 certification to get. I still don't and neverevever will get a CISSP as I think the cert is worthless for my field of work. The knowledge is probably good to have in general though. I have 3 certs all from GIAC/SANS, but they were after I had around 2/3 years as a Network Security Analyst.

I also have a BSc in Computer Networking and an MSc in Information Security, which has helped me gain the position I had. But things are different in Europe

Also, one HUGE thing, no matter what type of IT you go into, LEARN PROGRAMMING!! I lost a dream job because of it :wow:

But that is all IMO

Oh my god, please give me tips brehs!!!

I'm looking into the Network+ cert ( i have my A+) and debating working my way to a network admin role. I'm not a good programmer, but in terms of career goals I have no idea what is interesting. I work in a help desk/desktop support role atm. From cellphones to network issues.

What's network secruity like? Or Network Engineer? How much programming do I need?

Sorry if I'm rambling, but I don't have any knowledgeable people to ask these questions in my day to day :mjcry:

This shows me how much I still have to learn :wow:
 

Mowgli

Veteran
Joined
May 1, 2012
Messages
103,929
Reputation
13,839
Daps
245,300
Preciate this breh :mjcry:

I'm repping u back the moment I can
O you smart.

Riddle me this.

You connect to a remote ftp server using port 22 and sftp. You are asked to save a key the first time you login. You save it. You get in.

Weeks later you go to login and it says connection refused and you can no longer get in.

You delete Filezilla and the registry info for Filezilla, reinstall and you can't get in. Are not asked to install the trust key.

You go to another computer install Filezilla, input the same remote address and login information in site manager and wow you're able to connect.

Few weeks later same problem.

So in summary you can only connect to an sftp connection with a new install on a different computer with no way to reconnect on a previously working connection.
 

Gold

Veteran
Supporter
Joined
Aug 25, 2015
Messages
43,729
Reputation
19,642
Daps
292,843
O you smart.

Riddle me this.

You connect to a remote ftp server using port 22 and sftp. You are asked to save a key the first time you login. You save it. You get in.

Weeks later you go to login and it says connection refused and you can no longer get in.

You delete Filezilla and the registry info for Filezilla, reinstall and you can't get in. Are not asked to install the trust key.

You go to another computer install Filezilla, input the same remote address and login information in site manager and wow you're able to connect.

Few weeks later same problem.

So in summary you can only connect to an sftp connection with a new install on a different computer with no way to reconnect on a previously working connection.

First off, It sounds like the host key of the keypair is either missing or has expired. Private host keys can also be set to expire which would make your client key worthless.

What ssh client are you using? putty? open? deleting Filezilla registry would do nothing because your client is storing the keys for known host (which is why it's not asking you for the key anymore).

Delete the keys from the client and try again
 

Black Cobain

Donkey Punch? I Donkey Slap!
Joined
Dec 20, 2015
Messages
7,581
Reputation
2,795
Daps
23,106
Reppin
New Afrika
I do IT security.

I actually do it for a rather large US bank, but I am based in London. The security job market across the world is still in dire need for people

We need good network security analysts, good programmers and people who can deconstruct malware. That is the "blue" side of things.

On the other side you have the "red" teaming. People who can hack and crack things. They will essentially be good programmers.

Also there are things like threat analysis, where you're almost being a spy on a computer. You lean TTP (tactics, techniques and procedures) of actors e.g. Panda groups and other eastern European hacking groups.

Then you have the governance side of things. SOX, 27001, and a whole bunch of other shyt I don't even like.

Security is a VERY wide field, and I am interviewing a lot of potential employees with years of experience and more certs than me, makes me realise certifications aren't shyt. The clue is in the name, they are meant to CERTIFY you know something. So a lot of people put the cart before the horse is the wrong thing.

If anyone wants to get into security 1st, I say to some form of networking education with hands on experience e.g. CCNA - learn what ICMP is, learn the TCP headers, know what value is in an IP header to indicate a TCP packet is coming next. Then understand how Windows and Linux works. Install the OS's on a VM and get playing. Then figure out if you want to go down the red side - then learn how the internet works e.g. HTTP headers, CGI, how Javascript works, learn SQL and how to inject code, learn XSS, CSRF, etc. Or come down to the blue side - learn how malware works, learn to deconstruct it, learn what DLL's it loads (interject with learning how Windows works)

There is no 1 certification to get. I still don't and neverevever will get a CISSP as I think the cert is worthless for my field of work. The knowledge is probably good to have in general though. I have 3 certs all from GIAC/SANS, but they were after I had around 2/3 years as a Network Security Analyst.

I also have a BSc in Computer Networking and an MSc in Information Security, which has helped me gain the position I had. But things are different in Europe

Also, one HUGE thing, no matter what type of IT you go into, LEARN PROGRAMMING!! I lost a dream job because of it :wow:

But that is all IMO

Thanks so so much breh, i've trying to get more info on security for a minute but this is really in depth :blessed:
 

Mowgli

Veteran
Joined
May 1, 2012
Messages
103,929
Reputation
13,839
Daps
245,300
First off, It sounds like the host key of the keypair is either missing or has expired. Private host keys can also be set to expire which would make your client key worthless.

What ssh client are you using? putty? open? deleting Filezilla registry would do nothing because your client is storing the keys for known host (which is why it's not asking you for the key anymore).

Delete the keys from the client and try again
I believe it's using putty because i was able to find where the key is saved in the registry and it's using putty. Deleted the key and it still didn't ask to install it again. Only on new installs. Is there a way in Filezilla to delete this client key. This shouldn't be this gat damn inconvenient.

Is there a recommendation I should give to the host because they're telling us it's our problem. 5 devices later.
 
Top