Analysis Vulnerability Website Baleomolcreative dengan Metode Penetration Testing Execution Standard & Vulnerability Assessment Pada Http Response Header Field
DOI:
https://doi.org/10.35870/jtik.v8i3.2202Keywords:
Vulnerability, Penetration, Owaspzap, Nikto, Nmap, WebAbstract
This research will analyze web security and how to find out whether there is a vulnerability or what could be called a vulnerability to enter gaps in the Baleomolcreative web, making the web unsafe. In analyzing whether there are vulnerabilities, the Penetration Testing Execution Standard and Vulnerability Assessment methods are used to determine whether there are gaps or vulnerabilities in the Baleomolcreative website that can be exploited by external parties. This method uses tools such as Owasp ZAP, Nikto, and Nmap which can be used to perform vulnerability scanning on a website. In this research, we succeeded in identifying 3 levels of vulnerability on the Baleomolcreative website, namely medium, low, and informational, with a total of 18 alerts generated from notifications on Owasp Zap. The scanning process includes vulnerability testing such as Content Security Policy, Anti-clickjacking Header, Dangerous JS Functions, Permissions Policy, and others.
Downloads
References
Utoro, S., Nugroho, B. A., Meinawati, M., & Widianto, S. R. (2020). Analisis Keamanan Website E-Learning SMKN 1 Cibatu Menggunakan Metode Penetration Testing Execution Standard. MULTINETICS, 6(2), 169-178.
Fauzan, F. Y., & Syukhri, S. (2021). Analisis Metode Web Security PTES (Penetration Testing Execution And Standart) Pada Aplikasi E-Learning Universitas Negeri Padang. Voteteknika (Vocational Teknik Elektronika dan Informatika), 9(2), 105-111. DOI : https://doi.org/10.24036/voteteknika.v9i2.111778.
Zen, B. P., Gultom, R. A., & Reksoprodjo, A. H. (2020). Analisis Security Assessment Menggunakan Metode Penetration Testing dalam Menjaga Kapabilitas Keamanan Teknologi Informasi Pertahanan Negara. Teknologi Penginderaan, 2(1). DOI: https://doi.org/10.33172/tp.v2i1.574.
Mardianto, I., Sedyono, A., & Hafzan, A. (2015). Analisa Kerentanan Sis. trisakti. ac. id Menggunakan Teknik Vulnerability Scan. Jetri: Jurnal Ilmiah Teknik Elektro.
Sunaringtyas, S. U., & Prayoga, D. S. (2021). Implementasi Penetration Testing Execution Standard Untuk Uji Penetrasi Pada Layanan Single Sign-On. Edu Komputika Journal, 8(1), 48-56. DOI: https://doi.org/10.15294/edukomputika.v8i1.47179.
Subandi, K., & Sugara, V. I. (2022). Analisis Serangan Vulnerabilities Terhadap Server Selama Work from Home saat Pandemi Covid-19 sebagai Prosedur Mitigasi. Jurnal Asiimetrik: Jurnal Ilmiah Rekayasa dan Inovasi, 125-132. DOI: https://doi.org/10.35814/asimetrik.v4i1.3127.
Darojat, E. Z., Sediyono, E., & Sembiring, I. (2022). Vulnerability Assessment Website E-Government dengan NIST SP 800-115 dan OWASP Menggunakan Web Vulnerability Scanner. Jurnal Sistem Informasi Bisnis, 12(1), 36-44.
Muhyidin, Y., Totohendarto, M. H., & Undamayanti, E. (2022). Perbandingan Tingkat Keamanan Website Menggunakan Nmap Dan Nikto Dengan Metode Ethical Hacking. Jurnal Teknologika, 12(1), 80-89. DOI: https://doi.org/10.51132/teknologika.v12i1.143.
Herawati, N., & Budiyanto, V. (2023). ANALISIS KEAMANAN SEBUAH DOMAIN MENGGUNAKAN OPEN WEB APPLICATION SECURITY PROJECT (OWASP) Zap. JURNAL TEKNOLOGI TECHNOSCIENTIA, 27-36.
Tania, A. M., Setiyadi, D., & Khasanah, F. N. (2018). Keamanan website menggunakan vulnerability assessment. INFORMATICS FOR EDUCATORS AND PROFESSIONAL: Journal of Informatics, 2(2), 171-180.
Fathurahman, M., & Aziz, A. (2022). Vulnerability Assessment Dan Penetration Test Pada Website Ma/Mts Husnul Khatimah Kuningan. In Prosiding Seminar Nasional Terapan Riset Inovatif (Sentrinov) (Vol. 8, No. 3, pp. 138-145).
Budiman, A., Ahdan, S., & Aziz, M. (2021). Analisis Celah Keamanan Aplikasi Web E-Learning Universitas Abc Dengan Vulnerability Assesment. Jurnal Komputasi, 9(2).
Aristian, A., & Cholil, W. (2022). Analisis Vulnerability Terhadap Website Lembaga Bahasa LIA Palembang Menggunakan Nessus, Netsparker dan Acunetic. Jurnal Pendidikan dan Konseling (JPDK), 4(4), 2459-2473. DOI: https://doi.org/10.31004/jpdk.v4i4.5821.
Setiawan, B., Samopa, F., Akbar, I. A., Sani, N. A., Hidayanto, B. C., & Dharmawan, Y. S. (2023). Pendampingan Analisis Vulnerability dan Hardening pada Website Pemerintah Kota Surabaya. Sewagati, 7(6), 897-906. DOI: https://doi.org/10.12962/j26139960.v7i6.624.
Ohyver, J. T. (2022). Simulasi Keamanan Jaringan pada DPDK OpenvSwitch Berbasis Network-Based Intrusion Detection System (NIDS) (Doctoral dissertation).
Downloads
Published
Issue
Section
License
Copyright (c) 2024 Henokh Kurniawan, Erwien Christianto
This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.
Authors who publish with this journal agree to the following terms:
1. Copyright Retention and Open Access License
Authors retain copyright of their work and grant the journal non-exclusive right of first publication under the Creative Commons Attribution 4.0 International License (CC BY 4.0).
This license allows unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.
2. Rights Granted Under CC BY 4.0
Under this license, readers are free to:
- Share — copy and redistribute the material in any medium or format
- Adapt — remix, transform, and build upon the material for any purpose, including commercial use
- No additional restrictions — the licensor cannot revoke these freedoms as long as license terms are followed
3. Attribution Requirements
All uses must include:
- Proper citation of the original work
- Link to the Creative Commons license
- Indication if changes were made to the original work
- No suggestion that the licensor endorses the user or their use
4. Additional Distribution Rights
Authors may:
- Deposit the published version in institutional repositories
- Share through academic social networks
- Include in books, monographs, or other publications
- Post on personal or institutional websites
Requirement: All additional distributions must maintain the CC BY 4.0 license and proper attribution.
5. Self-Archiving and Pre-Print Sharing
Authors are encouraged to:
- Share pre-prints and post-prints online
- Deposit in subject-specific repositories (e.g., arXiv, bioRxiv)
- Engage in scholarly communication throughout the publication process
6. Open Access Commitment
This journal provides immediate open access to all content, supporting the global exchange of knowledge without financial, legal, or technical barriers.
