Article Per Year (5 Year)
p-Index From 2021 - 2026
0.23
P-Index
This Author published in this journals
All Journal Prisma Sains: Jurnal Pengkajian Ilmu dan Pembelajaran Matematika dan IPA IKIP Mataram
Aditya Cahyadi
Universitas Aisyiyah Yogyakarta
Biochemistry, Genetics & Molecular Biology Earth & Planetary Sciences Education Electrical & Electronics Engineering Energy Engineering Environmental Science Mathematics Physics Other

Published : 1 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 1 Documents
Search

 1 
Web Application Attack Reconstruction through Integration of PTES and DFRWS Methods Danur Wijayanto; Aditya Cahyadi
Prisma Sains : Jurnal Pengkajian Ilmu dan Pembelajaran Matematika dan IPA IKIP Mataram Vol. 14 No. 4: October 2026
Publisher : Universitas Pendidikan Mandalika

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.33394/j-ps.v14i4.21089

Abstract

This study aims to analyze the relationship between attack processes and digital artifacts through an integrated approach using the Penetration Testing Execution Standard (PTES) and the Digital Forensic Research Workshop (DFRWS), applied to a single controlled file upload attack scenario in the Simanisgizi web application. The method used includes the PTES stage as a structured penetration testing methodology to systematically identify system vulnerabilities, and the DFRWS stage to identify, collect, and analyze the resulting digital evidence. The results indicate that the system has a vulnerability in the file upload feature that allows malicious files to enter the server. However, attempts to execute commands via the webshell were unsuccessful, as indicated by an HTTP 404 response on each request. This indicates the existence of partial controls in the system that limit further exploitation. Based on log analysis, the attacker's activity patterns and sequence of events were successfully reconstructed systematically. Thus, the integration of PTES and DFRWS can provide a more comprehensive understanding of the relationship between attack techniques and the resulting digital evidence.
Co-Authors Wijayanto, Danur