Evaluasi Kerentanan Website Polbeng Menggunakan Metode Penetration Testing Execution Standard (PTES)

Website security plays a critical role in maintaining the integrity and availability of information services. This research aims to analyze the security level of the polbeng.ac.id website using several penetration testing techniques, including vulnerability scannning, brute-force testing, and Cross-Site Scripting (XSS) evaluation. The tools used in this study include WPScann, Hydra, XSStrike, and XSSer. The brute-force testing conducted on the WordPress login page did not succeed, as the server’s security system was able to detect and limit repeated login attempts. XSS testing using XSStrike identified reflected input in the search parameter, but the payloads could not be executed, indicating that the website is not vulnerable to XSS through that vector. Meanwhile, XSSer was only able to execute payloads on a simulated URL and not on the actual website, meaning that no real vulnerability could be confirmed. Overall, the results show that the website has implemented adequate security mechanisms to mitigate brute-force and XSS attacks, although continuous monitoring and regular system updates remain essential. This research is expected to serve as a reference for improving website security and supporting ongoing maintenance efforts within the system.