Claim Missing Document
Check
Articles

Found 33 Documents
Search

Penetration Testing for Cross-Site Scripting (XSS) Detection Using Penetration Testing Execution Standard (PTES) Methodology: A Case Study of Information Systems in Institution X Nabila Aulia Azizah; Gede Arna Jude Saskara; Gede Saindra Santyadiputra
KARMAPATI (Kumpulan Artikel Mahasiswa Pendidikan Teknik Informatika) Vol. 15 No. 2 (2026): Karmapati Vol 15 No 2 Tahun 2026
Publisher : Universitas Pendidikan Ganesha

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.23887/karmapati.v15i2.114689

Abstract

Web-based information systems in educational institutions store and process sensitive data, turning them into a perfect target for cybercriminals, particularly Cross-Site Scripting (XSS). This research aims to identify and evaluate XSS vulnerabilities across twelve web-based information systems at Institution X using Penetration Testing Execution Standard (PTES) methodology, combined with grey-box technique and black-box technique, and OWASP Risk Rating Methodology to assess the risk of the vulnerabilities. The testing was conducted by the researcher as an insider tester with student-level access, applying black-box testing for systems inaccessible to students and grey-box testing for systems accessible to students. The combination of automated tools including passive reconnaissance, active reconnaissance and manual testing was employed to minimize false positive and validated the vulnerabilities. The total of eleven XSS vulnerabilities across the twelve tested systems, consist of five Reflected XSS and six Stored XSS. No DOM-Based XSS vulnerabilities were confirmed across all the tested systems. All of identified vulnerabilities were assessed as medium risk based on the OWASP Risk Rating Methodology. These findings demonstrate that XSS vulnerabilities are still present within the educational institution environment indicates that secure input handling was inconsistently implemented across systems. The result highlights the importance of adopting remediation to secure coding practices, implementing proper input sanitization, output encoding, securing HTTP Headers, and Content Security Policy (CSP), as well as conducting regular security assessment to strengthen the overall security posture in an information system within educational institution.
Pengembangan Website Network Automation Manajemen Pelanggan PPPoE Menggunakan Mikrotik pada Jaringan RT/RW Net Ketut Gitahadi Merta; Gede Arna Jude Saskara; Gede Saindra Santyadiputra
Indonesian Journal of Multidisciplinary on Social and Technology Vol. 4 No. 3 (2026): Juli - Oktober
Publisher : PT Ilmu Data Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.69693/ijmst.v4i3.13654

Abstract

Pengelolaan pelanggan pada jaringan RT/RW Net yang masih dilakukan secara manual menggunakan WinBox dapat menyebabkan proses konfigurasi dan administrasi layanan membutuhkan waktu lebih lama serta meningkatkan risiko human error. Penelitian ini bertujuan mengembangkan Website Network Automation untuk manajemen pelanggan PPPoE menggunakan MikroTik pada jaringan RT/RW Net Mconnek guna meningkatkan efisiensi pengelolaan pelanggan dan konfigurasi jaringan. Penelitian menggunakan pendekatan Research and Development (R&D) dengan model Waterfall yang terdiri atas tahap requirement, design, implementation, verification, dan maintenance. Sistem dikembangkan menggunakan Next.js dan Tailwind CSS sebagai frontend, Laravel sebagai backend, MySQL sebagai basis data, RouterOS API untuk integrasi MikroTik, MessagePack untuk serialisasi data, Midtrans sebagai payment gateway, Wablas untuk notifikasi WhatsApp, serta Docker untuk mendukung deployment. Pengujian dilakukan menggunakan Black Box Testing, White Box Testing dengan teknik Basis Path Testing, dan pengujian efisiensi melalui perbandingan waktu antara metode manual menggunakan WinBox dan sistem pada lingkungan multi-router. Hasil pengujian menunjukkan seluruh fungsi sistem berjalan sesuai kebutuhan. Pengujian efisiensi menghasilkan peningkatan sebesar 49,37% hingga 83,86% pada seluruh fitur yang diuji. MessagePack juga mampu mengurangi ukuran payload pada sebagian besar fitur, sedangkan otomatisasi isolir pelanggan menggunakan sumber daya MikroTik yang relatif rendah. Dengan demikian, sistem berhasil meningkatkan efisiensi dan otomatisasi manajemen pelanggan PPPoE melalui integrasi konfigurasi jaringan dan administrasi layanan dalam satu platform berbasis web.
Cognitive scaffolding module in the Vilokka virtual laboratory for coding and artificial intelligence learning Gede Saindra Santyadiputra; I Wayan Santyasa; Made Juniantari
Indonesian Journal of Educational Development (IJED) Vol. 7 No. 2 (2026): August 2026
Publisher : Lembaga Penelitian dan Pengabdian Kepada Masyarakat (LPPM) Universitas PGRI Mahadewa Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.59672/ijed.v7i2.7020

Abstract

Indonesia’s Coding and Artificial Intelligence (KKA) curriculum mandate (BSKAP No. 046/H/KR/2025) requires Vocational High School (VHS) students to master Python programming and generative AI, exposing infrastructure inequality and cognitive overload as dual barriers. This study reports five ADDIE phases of developing and evaluating a cognitive scaffolding module integrated with Vilokka, an on-premises virtual laboratory embedding a guardrailed Local Large Language Model (Local-LLM). Participants were recruited through purposive sampling: five KKA teachers (Analysis), three validators (Expert Validation), and 30 VHS students (Implementation and Evaluation). Analysis identified three cognitive barrier patterns: pre-coding abstraction failure, logic-syntax conflation, and AI-induced cognitive passivity. The Design phase produced a 17-module architecture synchronising a three-level scaffolding framework (Sense-making, Process-scaffolding, and Fading) with KKA curriculum elements. The study employed four instruments: a teacher interview guide, an expert validation rubric, pre-test and post-test assessments, and practicality questionnaires. Expert validation yielded a mean validity of 89.72% (Very Valid). The field trial yielded a mean N-Gain of 0.39 (Moderate), confirmed by paired sample t-test (t(29) = 6.385, p < 0.05; Cohen’s d = 1.17). Practicality ratings were Very Practical for teachers (88.12%) and students (86.96%). The findings establish a replicable framework for AI-assisted vocational programming instruction, recommended for schools with infrastructure constraints.