Osstmm

Just wondering if anyone has had any experiences with the Open Source Security Testing Methodology manuall. Any good or bad points?


For anyone who doesn`t know what it is and would like to:

http://www.isecom.org/projects/osstmm.shtml

Thanks.

Well for more network based testing it's fairly good, well worth a read. But it's not so hot when it comes to web application security testing. But still worth a read.

SittingDuck