The XYZ Local Government Public Service Information System serves as a crucial medium for delivering digital-based public services. As information technology systems grow increasingly complex, cybersecurity threats are also evolving, necessitating periodic security system evaluations. This study aims to identify security vulnerabilities within the Public Service Information System using a penetration testing method based on the OWASP Top 10:2025 standard. A "Gray Box Testing" approach was employed, wherein the tester possessed partial information about the system under test. Vulnerability identification was conducted using OWASP ZAP, followed by testing of the discovered vulnerabilities to verify their risk levels. The vulnerability scan revealed 17 findings. These results demonstrate that the OWASP Top 10:2025 standard effectively serves as a reference for penetration testing, enabling the identification of security vulnerabilities and the provision of remediation recommendations to enhance web application security.
References
Alfi, M. (2023). Jurnal Kajian Stratejik Ketahanan Nasional Analisis Risiko Keamanan Siber dalam Transformasi Digital Pelayanan Publik di Indonesia Analisis Risiko Keamanan Siber Dalam Transformasi Digital Pelayanan Publik di Indonesia. 6(2). https://doi.org/10.7454/jkskn.v6i2.10082
Elanda, A., & Buana, R. L. (2021). ANALISIS KUALITAS KEAMANAN SISTEM INFORMASI E-OFFICE BERBASIS WEBSITE PADA STMIK ROSMA DENGAN MENGGUNAKAN OWASP TOP 10. 6(2), 185–191.
Hendita, G., Kusuma, A., Informatika, P. T., Teknik, F., Pancasila, U., & Selatan, J. (2022). IMPLEMENTASI OWASP ZAP UNTUK PENGUJIAN KEAMANAN SISTEM INFORMASI AKADEMIK. 16(2), 178–186.
Issaf, M. F., & Koprawi, M. (2025). Analisis Keamanan Website Pada Instansi XYZ Melalui Penetration Testing. 5(1), 547–555.
Jaelani, W. L., & Khoirunnisa, F. (2023). PENETRATION TESTING WEBSITE DENGAN METODE BLACK BOX TESTING UNTUK MENINGKATKAN KEAMANAN WEBSITE PADA INSTANSI ( REDACTED ). 05(01), 1–8.
Khoirun, M. F., & Tulodo, R. P. (2025). Analisis Kerentanan Website Menggunakan Metode Penetration Testing Dengan Standar Keamanan OWASP Top 10 : 2021 Studi Kasus Website Sistem Informasi Manajemen Laboratorium Dinas Kesehatan Kabupaten Tegal. 02(06), 762–773.
Pendahuluan, I. (2025). Analisis Keamanan Sistem Informasi Menggunakan Metode Vulnerability Assesment pada Aplikasi Web Karangasem . go . id. 9(2), 466–473.
Putri, D. A., Wahanani, H. E., & Nurlaili, A. L. (2025). Penerapan teknik. 10(3), 2366–2377.