The Open Source System Testing Methodology Manual (OSSTMM) was first created in 2001 by the Institute for Security and Open Methodologies (ISECOM). Many researchers from around the world participated in its creation. The ISECOM is a non-profit organization that maintains offices in Barcelona and New York.
The premise of the OSSTMM is that of verification. The OSSTMM is a peer-reviewed manual that provides a professional testing methodology and guidance. Also, as it is developed by a multitude of sources, the manual has an international flavor.
The OSSTMM is in constant development; you can download the latest release from http://www.isecom.org/research/osstmm.html.
At the time of writing, the current version of the OSSTMM is version 3, but there is a draft version 4 in review. It is a good idea to download both versions and review the differences and changes that are being made in the updated version. An example of the download page is shown in the following screenshot:
As the previous...