I am a QA Engineer, but have been tasked with creating a security testing platform. I have many years with Backtrack/Kali and my primary OS are Arch and Ubuntu. The Systems guys here gave me a CentOS machine in the cloud to build out a machine that will be the hub for all of our security tests. Both systems level tests and application layer (I will be running the tests).
Has anyone else found that CentOS be a viable option to house all your security tools? Initially I had asked the systems team to spin up a debain/ubuntu server for me to start with. They subsequently laughed in my face. The problem I am facing is most of the security tools I am familiar with are debian dependent. Are there other security tools out there that work well out of the box for CentOS? Their main argument against using Ubuntu is the difficulty that creates with Xen Server and the instability/insecurity of ubuntu. Not sure I agree with ubuntu being unstable, I haven't had any issues and security is a matter of how good an Admin you are imo (tempted to hand them CIS benchmarks). Any advice?