<![CDATA[This study aims to analyze the relationship between attack processes and digital artifacts through an integrated approach using the Penetration Testing Execution Standard (PTES) and the Digital Forensic Research Workshop (DFRWS), applied to a single controlled file upload attack scenario in the Simanisgizi web application. The method used includes the PTES stage as a structured penetration testing methodology to systematically identify system vulnerabilities, and the DFRWS stage to identify, collect, and analyze the resulting digital evidence. The results indicate that the system has a vulnerability in the file upload feature that allows malicious files to enter the server. However, attempts to execute commands via the webshell were unsuccessful, as indicated by an HTTP 404 response on each request. This indicates the existence of partial controls in the system that limit further exploitation. Based on log analysis, the attacker's activity patterns and sequence of events were successfully reconstructed systematically. Thus, the integration of PTES and DFRWS can provide a more comprehensive understanding of the relationship between attack techniques and the resulting digital evidence.]]>
Copyrights © 2026
