ANALISIS METODE UJI PENETRASI KEAMANAN WEBSITE (STUDI KASUS E-LEARNING UIN SUNAN KALIJAGA)

Fatih Nur Muhammad, NIM.: 20106050027 (2024) ANALISIS METODE UJI PENETRASI KEAMANAN WEBSITE (STUDI KASUS E-LEARNING UIN SUNAN KALIJAGA). Skripsi thesis, UIN SUNAN KALIJAGA YOGYAKARTA.

Preview	Text (ANALISIS METODE UJI PENETRASI KEAMANAN WEBSITE (STUDI KASUS E-LEARNING UIN SUNAN KALIJAGA)) 20106050027_BAB-I_IV-atau-V_DAFTAR-PUSTAKA.pdf - Published Version Download (2MB) | Preview
	Text (ANALISIS METODE UJI PENETRASI KEAMANAN WEBSITE (STUDI KASUS E-LEARNING UIN SUNAN KALIJAGA)) 20106050027_BAB-II_sampai_SEBELUM-BAB-TERAKHIR.pdf - Published Version Restricted to Registered users only Download (3MB) | Request a copy

Abstract

Internet security is a critical aspect in the increasingly advanced digital age, where the protection of personal data, sensitive information, and system integrity is of paramount importance. Penetration testing is a method that is often used to detect vulnerabilities in a website or application, so that these vulnerabilities can be fixed before they are exploited and data is stolen. This research is aimed at examining the analysis of the use of penetration test methods for website security and testing. The method used to conduct this research is a penetration test for data collection, testing, collecting test results, recapitulating test results and analyzing methods and test results. Testing is done with 4 attacks namely brute force, SQL Injection, XSS (Cross-site scripting), Directory Transversal. The results showed that of the four penetration test experiments, only the brute force attack succeeded in taking over the account. The other three attacks failed. The SQL injection attack failed because no parameter loopholes were found, the use of honeypots as a shield, and the Web Application Firewall (WAF) which effectively blocks attacks. The stored XSS attack also failed due to filters that filter out words containing JavaScript. Finally, the directory traversal attack failed due to good input validation, so malicious code could not be infiltrated through the search tab to access the directory directly.

Share this knowledge with your friends :

Actions (login required)

View Item