Published: 2024-07-01

Analysis Vulnerability Website Baleomolcreative dengan Metode Penetration Testing Execution Standard & Vulnerability Assessment Pada Http Response Header Field

DOI: 10.35870/jtik.v8i3.2202

Henokh Kurniawan, Erwien Christianto
  • Henokh Kurniawan: Satya Wacana Christian University , Indonesia . image/svg+xml
  • Erwien Christianto: Satya Wacana Christian University , Indonesia . image/svg+xml
Issue Cover

Downloads

Article Metrics
Share:

Abstract

This research will analyze web security and how to find out whether there is a vulnerability or what could be called a vulnerability to enter gaps in the Baleomolcreative web, making the web unsafe. In analyzing whether there are vulnerabilities, the Penetration Testing Execution Standard and Vulnerability Assessment methods are used to determine whether there are gaps or vulnerabilities in the Baleomolcreative website that can be exploited by external parties. This method uses tools such as Owasp ZAP, Nikto, and Nmap which can be used to perform vulnerability scanning on a website. In this research, we succeeded in identifying 3 levels of vulnerability on the Baleomolcreative website, namely medium, low, and informational, with a total of 18 alerts generated from notifications on Owasp Zap. The scanning process includes vulnerability testing such as Content Security Policy, Anti-clickjacking Header, Dangerous JS Functions, Permissions Policy, and others.

Keywords

Vulnerability ; Penetration ; Owaspzap ; Nikto ; Nmap ; Web

Peer Review Process

This article has undergone a double-blind peer review process to ensure quality and impartiality.

Indexing Information

Discover where this journal is indexed at our indexing page to understand its reach and credibility.

Open Science Badges

This journal supports transparency in research and encourages authors to meet criteria for Open Science Badges by sharing data, materials, or preregistered studies.

How to Cite

Kurniawan, H., & Christianto, E. (2024). Analysis Vulnerability Website Baleomolcreative dengan Metode Penetration Testing Execution Standard & Vulnerability Assessment Pada Http Response Header Field. Jurnal JTIK (Jurnal Teknologi Informasi Dan Komunikasi), 8(3), 734-745. https://doi.org/10.35870/jtik.v8i3.2202
Article Information

This article has been peer-reviewed and published in the Jurnal JTIK (Jurnal Teknologi Informasi dan Komunikasi). The content is available under the terms of the Creative Commons Attribution 4.0 International License.

  • Issue: Vol. 8 No. 3 (2024)

  • Section: Computer & Communication Science

  • Published: %750 %e, %2024

AI Research Hub

This article is indexed and available through various AI-powered research tools and citation platforms. Our AI Research Hub ensures that scholarly work is discoverable, accessible, and easily integrated into the global research ecosystem. By leveraging artificial intelligence for indexing, recommendation, and citation analysis, we enhance the visibility and impact of published research.

Semantic Scholar Scite Dimensions Connected Papers
Scholarly Connection Platforms
Dimensions Dimensions Connected Papers Connected Papers Scite Scite Google Scholar Google Scholar Semantic Scholar Semantic Scholar Garuda Garuda Scilit Scilit Crossref Crossref BASE BASE Zenodo Zenodo Unpaywall Unpaywall OpenCitations OpenCitations
Author Biographies
Henokh Kurniawan
Google Scholar ResearchGate ORCID

Program Studi Teknik Informatika, Fakultas Teknologi Informasi, Universitas Kristen Satya Wacana, Kota Salatiga, Provinsi Jawa Tengah, Indonesia.

Erwien Christianto
Google Scholar ResearchGate ORCID

Program Studi Teknik Informatika, Fakultas Teknologi Informasi, Universitas Kristen Satya Wacana, Kota Salatiga, Provinsi Jawa Tengah, Indonesia.

References
  • Utoro, S., Nugroho, B. A., Meinawati, M., & Widianto, S. R. (2020). Analisis Keamanan Website E-Learning SMKN 1 Cibatu Menggunakan Metode Penetration Testing Execution Standard. MULTINETICS, 6(2), 169-178.
    Google Scholar Scite Semantic Scholar Scilit Crossref Connected Papers
  • Fauzan, F. Y., & Syukhri, S. (2021). Analisis Metode Web Security PTES (Penetration Testing Execution And Standart) Pada Aplikasi E-Learning Universitas Negeri Padang. Voteteknika (Vocational Teknik Elektronika dan Informatika), 9(2), 105-111. DOI : https://doi.org/10.24036/voteteknika.v9i2.111778.
    Google Scholar Scite Semantic Scholar Scilit Crossref Connected Papers
  • Zen, B. P., Gultom, R. A., & Reksoprodjo, A. H. (2020). Analisis Security Assessment Menggunakan Metode Penetration Testing dalam Menjaga Kapabilitas Keamanan Teknologi Informasi Pertahanan Negara. Teknologi Penginderaan, 2(1). DOI: https://doi.org/10.33172/tp.v2i1.574.
    Google Scholar Scite Semantic Scholar Scilit Crossref Connected Papers
  • Mardianto, I., Sedyono, A., & Hafzan, A. (2015). Analisa Kerentanan Sis. trisakti. ac. id Menggunakan Teknik Vulnerability Scan. Jetri: Jurnal Ilmiah Teknik Elektro.
    Google Scholar Scite Semantic Scholar Scilit Crossref Connected Papers
  • Sunaringtyas, S. U., & Prayoga, D. S. (2021). Implementasi Penetration Testing Execution Standard Untuk Uji Penetrasi Pada Layanan Single Sign-On. Edu Komputika Journal, 8(1), 48-56. DOI: https://doi.org/10.15294/edukomputika.v8i1.47179.
    Google Scholar Scite Semantic Scholar Scilit Crossref Connected Papers
  • Subandi, K., & Sugara, V. I. (2022). Analisis Serangan Vulnerabilities Terhadap Server Selama Work from Home saat Pandemi Covid-19 sebagai Prosedur Mitigasi. Jurnal Asiimetrik: Jurnal Ilmiah Rekayasa dan Inovasi, 125-132. DOI: https://doi.org/10.35814/asimetrik.v4i1.3127.
    Google Scholar Scite Semantic Scholar Scilit Crossref Connected Papers
  • Darojat, E. Z., Sediyono, E., & Sembiring, I. (2022). Vulnerability Assessment Website E-Government dengan NIST SP 800-115 dan OWASP Menggunakan Web Vulnerability Scanner. Jurnal Sistem Informasi Bisnis, 12(1), 36-44.
    Google Scholar Scite Semantic Scholar Scilit Crossref Connected Papers
  • Muhyidin, Y., Totohendarto, M. H., & Undamayanti, E. (2022). Perbandingan Tingkat Keamanan Website Menggunakan Nmap Dan Nikto Dengan Metode Ethical Hacking. Jurnal Teknologika, 12(1), 80-89. DOI: https://doi.org/10.51132/teknologika.v12i1.143.
    Google Scholar Scite Semantic Scholar Scilit Crossref Connected Papers
  • Herawati, N., & Budiyanto, V. (2023). ANALISIS KEAMANAN SEBUAH DOMAIN MENGGUNAKAN OPEN WEB APPLICATION SECURITY PROJECT (OWASP) Zap. JURNAL TEKNOLOGI TECHNOSCIENTIA, 27-36.
    Google Scholar Scite Semantic Scholar Scilit Crossref Connected Papers
  • Tania, A. M., Setiyadi, D., & Khasanah, F. N. (2018). Keamanan website menggunakan vulnerability assessment. INFORMATICS FOR EDUCATORS AND PROFESSIONAL: Journal of Informatics, 2(2), 171-180.
    Google Scholar Scite Semantic Scholar Scilit Crossref Connected Papers
  • Fathurahman, M., & Aziz, A. (2022). Vulnerability Assessment Dan Penetration Test Pada Website Ma/Mts Husnul Khatimah Kuningan. In Prosiding Seminar Nasional Terapan Riset Inovatif (Sentrinov) (Vol. 8, No. 3, pp. 138-145).
    Google Scholar Scite Semantic Scholar Scilit Crossref Connected Papers
  • Budiman, A., Ahdan, S., & Aziz, M. (2021). Analisis Celah Keamanan Aplikasi Web E-Learning Universitas Abc Dengan Vulnerability Assesment. Jurnal Komputasi, 9(2).
    Google Scholar Scite Semantic Scholar Scilit Crossref Connected Papers
  • Aristian, A., & Cholil, W. (2022). Analisis Vulnerability Terhadap Website Lembaga Bahasa LIA Palembang Menggunakan Nessus, Netsparker dan Acunetic. Jurnal Pendidikan dan Konseling (JPDK), 4(4), 2459-2473. DOI: https://doi.org/10.31004/jpdk.v4i4.5821.
    Google Scholar Scite Semantic Scholar Scilit Crossref Connected Papers
  • Setiawan, B., Samopa, F., Akbar, I. A., Sani, N. A., Hidayanto, B. C., & Dharmawan, Y. S. (2023). Pendampingan Analisis Vulnerability dan Hardening pada Website Pemerintah Kota Surabaya. Sewagati, 7(6), 897-906. DOI: https://doi.org/10.12962/j26139960.v7i6.624.
    Google Scholar Scite Semantic Scholar Scilit Crossref Connected Papers
  • Ohyver, J. T. (2022). Simulasi Keamanan Jaringan pada DPDK OpenvSwitch Berbasis Network-Based Intrusion Detection System (NIDS) (Doctoral dissertation).
    Google Scholar Scite Semantic Scholar Scilit Crossref Connected Papers
License & Copyright
Creative Commons License

This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.

Authors who publish with this journal agree to the following terms:

1. Copyright Retention and Open Access License

Authors retain copyright of their work and grant the journal non-exclusive right of first publication under the Creative Commons Attribution 4.0 International License (CC BY 4.0).

This license allows unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.

2. Rights Granted Under CC BY 4.0

Under this license, readers are free to:

  • Share — copy and redistribute the material in any medium or format
  • Adapt — remix, transform, and build upon the material for any purpose, including commercial use
  • No additional restrictions — the licensor cannot revoke these freedoms as long as license terms are followed

3. Attribution Requirements

All uses must include:

  • Proper citation of the original work
  • Link to the Creative Commons license
  • Indication if changes were made to the original work
  • No suggestion that the licensor endorses the user or their use

4. Additional Distribution Rights

Authors may:

  • Deposit the published version in institutional repositories
  • Share through academic social networks
  • Include in books, monographs, or other publications
  • Post on personal or institutional websites

Requirement: All additional distributions must maintain the CC BY 4.0 license and proper attribution.

5. Self-Archiving and Pre-Print Sharing

Authors are encouraged to:

  • Share pre-prints and post-prints online
  • Deposit in subject-specific repositories (e.g., arXiv, bioRxiv)
  • Engage in scholarly communication throughout the publication process

6. Open Access Commitment

This journal provides immediate open access to all content, supporting the global exchange of knowledge without financial, legal, or technical barriers.

Downloads

Similar Articles

You may also start an advanced similarity search for this article.

Most read articles by the same author(s)