I'm a security enthusiast, and am in need of some guidance to get me into the branch. I've always been held back by lack of methodology in my research, and it tends to break down my motivation towards learning and studying new concepts within the field...
My problem is this:
The past few days I've been debating whether or not I should go with Linux or Windows for security research. While most utilities, frameworks, i.e. tools, are more common in Linux environments, I cannot help but feel a bit confused in the area.
Say I wanted to audit/fuzz proprietary software that is only available on the Windows platform. Would I have to do my research through a virtual machine? A good example would be Internet Explorer.
Thus, I'm thinking Windows might be a better way to go, since I can always just craft my own tools for my research, but again: When I actually find a vulnerability, and want to test out PoC code, Linux would be a lot easier for me to conduct the operation.
Not to mention, security is vastly different on each platforms. Thinking in terms of Windows exception handling and so on.
What should I do? Or am I looking at all this the wrong way?