Analisis Keamanan Website Sekolah MAN 1 Banyumas Menggunakan PenetrationTesting Execution Standard (PTES)

Authors

  • Dewi Mardiana Program Studi Teknik Informatika, Universitas Muhammadiyah Purwokerto, Indonesia
  • Sigit Sugiyanto Program Studi Teknik Informatika, Universitas Muhammadiyah Purwokerto, Indonesia
  • Harjono Harjono Program Studi Teknik Informatika, Universitas Muhammadiyah Purwokerto, Indonesia
  • Ermadi Satria Wijaya Program Studi Teknik Informatika, Universitas Muhammadiyah Purwokerto, Indonesia

DOI:

https://doi.org/10.35746/jtim.v8i3.1102

Keywords:

Penetration Testing, PTES, OWASP ZAP

Abstract

Digital transformation is driving educational institutions to adopt web portals, yet cybersecurity evaluation is still often neglected. This study aims to identify and validate security vulnerabilities on the official website of MAN 1 Banyumas using the Penetration Testing Execution Standard (PTES) framework. Testing was conducted using a black-box penetration testing approach by combining Open Worldwide Application Security Project (OWASP ZAP) scanning and manual verification to reduce false positives. The results showed the discovery of 4 true positive vulnera-bilities, 1 false positive, and medium-risk FTP and SSH ports. Validated vulnerabilities include Cross-Site Request Forgery (CSRF), Clickjacking, session management weaknesses, and Vulnerable JS Library, while Cross-Site Scripting (XSS) vulnerabilities were confirmed as false positives. Simulation of vulnerability chaining showed that the combination of these vulnerabilities has the potential to lead to account takeover. Therefore, server hardening and JavaScript library updates are recommended to improve system security.

Downloads

Download data is not yet available.

References

A. M. Nurjanah, “Analisis Keamanan Website Sekolah SMAN 1 TEMPULING dengan Menggunakan Open Web Appli-cation Securiti Project ( OWASP ),” J. PERANGKAT LUNAK, vol. 6, no. 2, pp. 351–361, 2024, https://doi.org/10.32520/jupel.v6i2.3442.

M. A. Zein, U. Yunan, K. Septo, and A. Almaarif, “Security Hardening Sistem Operasi Virtual Private Server Pada Instan-si Pendidikan XYZ Berdasarkan NIST SP 800-123,” JIPI (Jurnal Ilm. Penelit. dan Pembelajaran Inform., vol. 8, no. 1, pp. 230–241, 2023, https://doi.org/10.29100/jipi.v8i1.3438.

J. Khatib and S. Dalam, “Indonesian Journal of Computer Science,” Indones. J. Comput. Sci., vol. 13, no. 1, pp. 3315–3327, 2024, https://doi.org/10.33022/ijcs.v13i2.3736.

D. K. S. dan S. (Kominfo-CSIRT), “Laporan Tahunan Keamanan Siber 2024,” 2024. [Online]. Available: https://csirt.komdigi.go.id/storage/uploads/document_centers/attachments/Laporan_Tahunan_Kamsiber_2024.pdf

B. Kurniawan, I. Ruslianto, and S. Bahri, “Implementasi Penetration Testing Pada Website Menggunakan Metode Pene-tration Testing Execution Standard ( PTES ) Implementation of Penetration Testing on the Website Using the Penetration Testing Execution Standard ( PTES ) Method,” CESS (Journal Comput. Eng. Syst. Sci., vol. 8, no. July, pp. 518–528, 2023, https://doi.org/10.24114/cess.v8i2.47096.

M. A. Nurrizki, E. Iman, and H. Ujianto, “Analisis Keamanan Website Desa Budaya DIY Dengan Metode Penetration Testing ( Pentest ) dan OWASP ZAP,” J. Apl. Teknol. Inf. dan Manaj., vol. 5, no. 1, pp. 22–27, 2024, https://doi.org/10.31102/jatim.v5i1.2620.

M. B. Imtias, K. Umam, H. Mustofa, and M. H. Subowo, “Comparative Analysis of Penetration Testing Frameworks : OWASP , PTES , and NIST SP 800-115 for Detecting Web Application Vulnerabilities,” J. Appl. Informatics Comput., vol. 9, no. 6, pp. 3689–3696, 2025, https://doi.org/10.30871/jaic.v9i6.9846.

D. A. Utama and R. Supardi, “Analisis Keamanan Website Menggunakan PTES ( Penetration Testing Execution And Standart ),” J. media Inform., vol. 20, no. 1, pp. 106–112, 2024, https://doi.org/10.37676/jmi.v20i1.5367.

G. zaidan muflih abdur Rahman Fadilah, “Analisis Keamanan Website SMK VIP Al-Huda Kebumen Menggunakan Metode Penetration Testing Execution Standard ( PTES ),” Chain J. Comput. Technol. Comput. Eng. Informatics, vol. 4, no. 3, pp. 218–228, 2026, https://ejournal.techcart-press.com/index.php/chain/article/view/290.

M. N. Fikri, B. P. Zen, R. Adhitama, and E. A. Firdaus, “Analisis Keamanan Sistem Informasi Website SMA Negeri 1 So-karaja Menggunakan Metode Penetration Testing Execution Standard ( PTES ),” J. Inform., vol. 2, no. September, pp. 19–27, 2023, https://doi.org/10.57094/ji.v2i2.1046.

M. Tahir and M. Risky, “Analisis Keamanan Website Dinas Pemerintahan Yogyakarta Dengan Metode PTES ( Penetra-tion Testing Execution Standard ),” J. Tek. Inform. UNIKA St. Thomas, vol. 09, no. 1, pp. 118–125, 2024, https://ejournal.ust.ac.id/index.php/JTIUST/article/view/3334.

L. O. A. M. W. Selvi Dwi Hartiyani, Agung Prayogo, Ardy Wicaksono, “Pengujian Keamanan Jaringan Menggunakan Penetration Testing Execution Standart (PTES) di SMK Bina Harapan Yogyakarta,” Media Inform., vol. 24, no. 2, pp. 139–153, 2025, https://doi.org/10.37595/mediainfo.v24i2.355.

L. S. Sign-on, S. Ulfa, and D. Surya, “Implementasi Penetration Testing Execution Standard Untuk Uji Penetrasi Pada,” Edu Komputika J., vol. 8, no. 1, pp. 48–56, 2021, https://doi.org/10.15294/edukomputika.v8i1.47179.

Downloads

Published

2026-08-10

Issue

Vol. 8 No. 3 (2026): August

Section

Articles

License

Copyright (c) 2026 Dewi Mardiana, Sigit Sugiyanto, Harjono Harjono, Ermadi Satria Wijaya

Creative Commons License

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.

How to Cite

[1]
D. Mardiana, S. Sugiyanto, H. Harjono, and E. S. Wijaya, “Analisis Keamanan Website Sekolah MAN 1 Banyumas Menggunakan Penetration Testing Execution Standard (PTES)”, jtim, vol. 8, no. 3, pp. 666–680, Aug. 2026, doi: 10.35746/jtim.v8i3.1102.

Most read articles by the same author(s)