Article Per Year (5 Year)
p-Index From 2020 - 2025
1.687
P-Index
This Author published in this journals
All Journal Jurnal Informatika dan Teknik Elektro Terapan Jurnal Informatika Nuansa Informatika Jurnal Sistem Informasi Galuh
Syani, Mamay
Unknown Affiliation
Computer Science & IT

Published : 11 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 11 Documents
Search

 1   2 
Uji Keamanan Aplikasi Website XYZ Menggunakan Burp Suite Berdasarkan Kerangka NIST SP 800-115 Syani, Mamay; Nurhakim, Ridwan; Rifgi Pratama, Fadhil; Maulana, Haisyam; Nurdin, Ali; Pamungkas, Bayu
Jurnal Sistem Informasi Galuh Vol 3 No 2 (2025): Journal of Galuh Information Systems
Publisher : Fakultas Teknik Jurusan Sistem Informasi Universitas Galuh

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.25157/jsig.v3i2.4965

Abstract

Advancements in digital technology have prompted government institutions to adopt online services, including the provision of public information through their official websites. However, the growing reliance on digital systems has also led to an increase in cybersecurity threats. This study aims to assess potential security vulnerabilities on the XYZ website, which is managed by a regional government, using a penetration testing approach based on the NIST SP 800-115 framework and the Burp Suite tool. The testing process was carried out in four phases: planning, discovery, attack execution, and reporting. The results revealed eight vulnerabilities, including two classified as high severity: code injection and unencrypted communication (HTTP). Additionally, publicly accessible backup files and support for XML input were identified, posing risks of XML External Entity (XXE) attacks. These findings highlight the critical importance of input validation, full implementation of HTTPS protocols, and strict file management to enhance website security. The study also recommends conducting further audits related to XML vulnerabilities and implementing continuous system monitoring to address evolving cyber threats.
Co-Authors Ali Nurdin Annail, Nura Nasywa bayu pamungkas Dadan Mulyana Despawana Eryan Ahmad Firdaus Fajar Aditya Firdaus Laia Maalik Falah, Hafizh Mahdani Maulana, Haisyam Nurhakim, Ridwan Pratama Jabir, Yuda Putra Nugraha, Reza Rifgi Pratama, Fadhil Rizky Ariyanto, Andre Tri Rizky Hadiansyah , Muhammad Subagja, Tirta Taufik Fajar Mustafa Tuti Rohayati Usep Abdul Rosid Yudi Permana, Nana