Article Per Year (5 Year)
p-Index From 2021 - 2026
1.383
P-Index
This Author published in this journals
All Journal Jurnal Pendidikan Vokasi JPTK: Jurnal Pendidikan Teknologi dan Kejuruan Jurnal Ilmu Komputer Jurnal Pendidikan Teknologi dan Kejuruan KARMAPATI (Kumpulan Artikel Mahasiswa Pendidikan Teknik Informatika) ISSN: 2252-9063 CESS (Journal of Computer Engineering, System and Science) Jurnal Nasional Pendidikan Teknik Informatika (JANAPATI) Jurnal Nasional Teknik Elektro dan Teknologi Informasi Jurnal Pendidikan Anak
Gede Saindra Santyadiputra
Universitas Pendidikan Ganesha
Computer Science & IT Control & Systems Engineering Education Electrical & Electronics Engineering Energy Engineering Languange, Linguistic, Communication & Media Library & Information Science Social Sciences Other

Published : 31 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 31 Documents
Search

 1   2   3   4 
Penetration Testing for Cross-Site Scripting (XSS) Detection Using Penetration Testing Execution Standard (PTES) Methodology: A Case Study of Information Systems in Institution X Nabila Aulia Azizah; Gede Arna Jude Saskara; Gede Saindra Santyadiputra
KARMAPATI (Kumpulan Artikel Mahasiswa Pendidikan Teknik Informatika) Vol. 15 No. 2 (2026): [ONGOING] Karmapati Vol 15 No 2 Tahun 2026
Publisher : Universitas Pendidikan Ganesha

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.23887/karmapati.v15i2.114689

Abstract

Web-based information systems in educational institutions store and process sensitive data, turning them into a perfect target for cybercriminals, particularly Cross-Site Scripting (XSS). This research aims to identify and evaluate XSS vulnerabilities across twelve web-based information systems at Institution X using Penetration Testing Execution Standard (PTES) methodology, combined with grey-box technique and black-box technique, and OWASP Risk Rating Methodology to assess the risk of the vulnerabilities. The testing was conducted by the researcher as an insider tester with student-level access, applying black-box testing for systems inaccessible to students and grey-box testing for systems accessible to students. The combination of automated tools including passive reconnaissance, active reconnaissance and manual testing was employed to minimize false positive and validated the vulnerabilities. The total of eleven XSS vulnerabilities across the twelve tested systems, consist of five Reflected XSS and six Stored XSS. No DOM-Based XSS vulnerabilities were confirmed across all the tested systems. All of identified vulnerabilities were assessed as medium risk based on the OWASP Risk Rating Methodology. These findings demonstrate that XSS vulnerabilities are still present within the educational institution environment indicates that secure input handling was inconsistently implemented across systems. The result highlights the importance of adopting remediation to secure coding practices, implementing proper input sanitization, output encoding, securing HTTP Headers, and Content Security Policy (CSP), as well as conducting regular security assessment to strengthen the overall security posture in an information system within educational institution.
Co-Authors Agus Aan Jiwa Permana Amaliya Syafitri Dessy Seri Wahyuni Desy Aulia Alfany Dewa Gede Hendra Divayana, Dewa Gede Hendra Dewa Nyoman Suartama Ariawan Gede Aditra Pradnyana Gede Arna Jude Saskara Gede Whidi Harta Heni Pujiastuti I Gede Mahendra Darmawiguna I Gusti Ayu Nyoman Mariani I Gusti Ngurah Agung Pramasurya Dwi Septian I Ketut Resika Arthana I Komang Hery Abdi Suputra I Made Ardwi Pradnyana I Made Dedi Suardika I Made Edy Listartha I Made Gede Sunarya I Made Putrama I Made Yuda Pratama I Putu Agra Arimbawa I Wayan Adi Sparta Ida Ayu Komang Viki Wahyuni Kadek Dodi Permana Kadek Mira B. Pramesti Ketut Agustini Ketut Gede Widia Pratama Putra Ketut Inda Sundhari Komang Ariasa Luh Astiti M.Cs S.Kom I Made Agus Wirawan . Made Windu Antara Kesiman Made Windu Antara Kesiman Nabila Aulia Azizah Ni Kadek Evi Apriani Nyoman Putri Rustrini Nyoman Sugihartini P. WAYAN ARTA SUYASA Rendita Septiadi Ria Hartini Sindu, I Gede Partha Urwah Al Barqi