Analisis Kerentanan pada website SDN 50 Bengkalis Menggunakan Metode VAPT (Vulnerability Assessment & Penetration Testing)

The research entitled Vulnerability Analysis on the Sdn 50 Bengkalis Website Using the VAPT Method aims to analyze security vulnerabilities on the SDN 50 Bengkalis website using the VAPT (Vulnerability Assessment & Penetration Testing) method. This method involves the use of tools such as OWASP ZAP, Nikto, and Nmap to identify security holes that may be exploited by irresponsible parties. The results of the study show that the SDN 50 Bengkalis website using the OWASP ZAP tool found 2 SQL Injection vulnerabilities on 2 different endpoints/parameters, as well as 1 Vulnerable JavaScript Library vulnerability. The focus of this research focuses on SQL Injectin vulnerabilities. The original contribution in this research is to mitigate to prevent irresponsible cyber attacks, therefore researchers make improvements to the source code such as the use of query builders to prevent SQL Injection. By conducting this analysis and improvements, the website is guaranteed safe from SQL Injection attacks, so that sensitive student and staff data is guaranteed safe and does not damage the school's reputation.