<![CDATA[The rapid development of information technology has made websites one of the most important infrastructures for public services, business operations, and digital communication. However, the increasing use of websites is also accompanied by a growing number of cyber threats. Web application vulnerabilities such as SQL Injection, Cross-Site Scripting (XSS), and insecure server configurations can be exploited by attackers to gain unauthorized access to or manipulate sensitive data. Therefore, a systematic security analysis is required to minimize the risk of cyberattacks.This study aims to analyze the security level of a website using OWASP ZAP (Zed Attack Proxy) on the Kali Linux operating system. The research methodology consists of several stages, including literature review, testing environment preparation, website target selection, vulnerability scanning through automated and manual testing, result analysis, and mitigation recommendation development. The identified vulnerabilities were classified according to the OWASP Top 10 standard and categorized based on their risk levels (high, medium, and low).The results indicate that OWASP ZAP is capable of detecting various potential vulnerabilities within the tested website, particularly those related to input validation and authentication management. Several identified vulnerabilities were classified as medium- to high-risk, indicating that they could potentially be exploited if not properly addressed. Recommended mitigation measures include implementing strict input validation, utilizing prepared statements in database operations, and strengthening server security configurations. In conclusion, this study demonstrates that OWASP ZAP running on Kali Linux is an effective tool for detecting website vulnerabilities and can serve as a valuable reference for developers and system administrators in improving web application security.]]>
Copyrights © 2026
