Pengujian Celah Keamanan Aplikasi Berbasis Web mengunakan Tehnik Penetration Testing

Priambodo, Priambodo Antonius (2024) Pengujian Celah Keamanan Aplikasi Berbasis Web mengunakan Tehnik Penetration Testing. Undergraduate thesis, UNIVERSITAS KATOLIK MUSI CHARITAS PALEMBANG.

	Text (Cover) IF-2024-1913010-cover.pdf Download (512kB)
	Text (Abstract) IF-2024-1913010-abstract.pdf Restricted to Registered users only Download (8kB) | Request a copy
	Text (Tableofcontent) IF-2024-1913010-tableofcontent.pdf Restricted to Registered users only Download (161kB) | Request a copy
	Text (Chapter1) IF-2024-1913010-chapter 1.pdf Restricted to Registered users only Download (89kB) | Request a copy
	Text (Chapter2) IF-2024-1913010-chapter 2.pdf Restricted to Registered users only Download (523kB) | Request a copy
	Text (Chapter3) IF-2024-1913010-chapter 3.pdf Restricted to Registered users only Download (397kB) | Request a copy
	Text (Chapter4) IF-2024-1913010-chapter 4.pdf Restricted to Registered users only Download (1MB) | Request a copy
	Text (Conclusion) IF-2024-1913010-conclusion.pdf Restricted to Registered users only Download (9kB) | Request a copy
	Text (Reference) IF-2024-1913010-reference.pdf Restricted to Registered users only Download (163kB) | Request a copy
	Text (Attachment) IF-2024-1913010-attachment.pdf Restricted to Registered users only Download (8MB) | Request a copy
	Text (Complete) IF-2024-1913010-complete.pdf Restricted to Repository staff only Download (12MB) | Request a copy
	Text (Summary) IF-2024-1913010-summary_id.pdf Restricted to Registered users only Download (651kB) | Request a copy

Abstract

Penetration testing Execution Standard (PTES) and OWASP Web Security Testing Guide (WSTG) are two structured frameworks in Penetration testing and web application security. This research uses WSTG methodology with testing scheme to identify security vulnerabilities in specified domains. The first step is to determine the scope of testing, followed by the implementation of scanning functions such as SQL Injection and subdomain scanning. Weak cryptographic checks are not possible because the site is encrypted. This research provides an understanding of code implementation and its dependencies as well as the need for permissions and rules related to security and scanning. However, it is important to improve the flexibility and security of the code, perform input validation and sanitization, and perform further verification before production use. This research contributes to basic safety testing, but further testing is needed.

Actions (login required)

View Item