Ekamartha, Ken Narendra (2026) SECURITY ANALYSIS OF THE WESKONEK ERP SYSTEM USING A HYBRID MITRE AND PTES METHOD. Undergraduate thesis, Universitas Pembangunan Nasional “Veteran” Jawa Timur.
![[img]](https://repository.upnjatim.ac.id/style/images/fileicons/text.png) |
Text (Cover)
Cover Lengkap.pdf Download (928kB) |
|
Text (Bab 1)
Bab 1.pdf Download (200kB) |
|
Text (Bab 2)
Bab 2.pdf Restricted to Repository staff only until 22 July 2029. Download (2MB) |
|
Text (Bab 3)
Bab 3.pdf Restricted to Repository staff only until 22 July 2029. Download (1MB) |
|
Text (Bab 4)
Bab 4.pdf Restricted to Repository staff only until 22 July 2029. Download (668kB) |
|
Text (Bab 5)
Bab 5.pdf Download (192kB) |
|
Text (Daftar Pustaka)
Dafpus.pdf Download (195kB) |
|
Text (Lampiran)
Lampiran.pdf Restricted to Repository staff only until 22 July 2029. Download (520kB) |
Abstract
The web-based Enterprise Resource Planning (ERP) system centrally stores an organization's operational data but is vulnerable to security threats if not adequately protected. This study aims to analyze the security of the Weskonek ERP System owned by PT Tekno Konek Solusi using a Grey-Box Penetration Testing approach. The applied hybrid method combines the PTES phases, weakness classification with CWE, attack mapping using MITRE ATT&CK, and severity assessment through CVSS v3.1. Testing was conducted using tools such as OWASP ZAP, Burp Suite, SQLmap, and Nmap. The results identified vulnerabilities including SQL Injection, Cross-Site Scripting (XSS), Brute Force on the Login Page, and Active Session Misuse, impacting the system's confidentiality, integrity, and availability. This study provides mitigation mitigation including strengthening input validation, managing authentication, securing sessions, configuring cookies, and limiting login attempts
| Item Type: | Thesis (Undergraduate) | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Contributors: |
|
||||||||||||
| Subjects: | T Technology > TK Electrical engineering. Electronics Nuclear engineering > TK5105 Computer Network T Technology > TK Electrical engineering. Electronics Nuclear engineering > TK5105.882 Internet T Technology > TK Electrical engineering. Electronics Nuclear engineering > TK5105.888 World Wild Web |
||||||||||||
| Divisions: | Faculty of Computer Science > Departemen of Informatics | ||||||||||||
| Depositing User: | Ken Narendra Ekamartha | ||||||||||||
| Date Deposited: | 24 Jul 2026 06:37 | ||||||||||||
| Last Modified: | 24 Jul 2026 07:38 | ||||||||||||
| URI: | https://repository.upnjatim.ac.id/id/eprint/57867 |
Actions (login required)
 |
View Item |