Open Source Security Testing

dr_labrat writes: "Most penetration testing companies use "proprietary" methodologies to audit their customer's networks. The Open Source Security Testing Methodology Manual (pronounced: Osstum) now gives reputable companies the opportunity to use a peer reviewed standard, and be compared to a wider community! It's just made it to version 2 and is gathering popularity."

Hmm...

[42forty-two42]

Can someone provide an overview?

OSSTMM = Hacker's Manual?

[Eppie]

To what degree does open source testing of system vulnerabilities expose those vulnerabilities to hackers that otherwise wouldn't have access to them? After all, it is difficult to probe vulnerabilities without pointing them out. Examining the source and instructions of OSSTMM should be mandatory reading for newbie hackers.