Development of a Telegram-Based Automated Penetration Testing System Based on PTES and OWASP WSTG Version 4.2

Ahmad Izza Abdillah (Cyber Security Engineering, National Cyber and Crypto Polytechnic, Indonesia)
Ira Rosianal Hikmah (Cyber Security Engineering, National Cyber and Crypto Polytechnic, Indonesia)
Rahmat Purwoko (Cyber Security Engineering, National Cyber and Crypto Polytechnic, Indonesia)
Arizal Arizal (Cyber Security Engineering, National Cyber and Crypto Polytechnic, Indonesia)

Jurnal Teknik Informatika (JUTIF)
Vol. 7 No. 5 (2026): JUTIF Volume 7, Number 5, October 2026

The security of Electronic-Based Government Systems (SPBE) is imperative for protecting public service websites and safeguarding sensitive data. Persistent security threats, such as web defacement incidents, necessitate the adoption of more efficient and accessible security assessment methodologies. This research addresses this challenge by proposing an automated penetration testing tool integrated into a Telegram bot interface, developed using the Software Development Life Cycle (SDLC) methodology. This study contributes a fully integrated, Telegram-driven penetration testing framework aligned with standardized security testing protocols, specifically the Penetration Testing Execution Standard (PTES) and OWASP WSTG v4.2. A key technical advancement is the integration of proxychains technology to prevent IP address blocking during automated scans. Evaluation through User Acceptance Testing (UAT) yielded an overall score of 95.75%, confirming its excellent reliability (96%), usability (96%), and efficiency (95.2%). Performance testing validated the tool's capability to detect four out of five predefined vulnerability types. This research concludes that the tool is a viable solution for enhancing the security posture of government websites through standardized and regular security audits.