Vulnerability Analysis and Mitigation of Village Website Using Vulnerability Scanner Based on PTES Method

Web application security is a top priority in the digital era, especially for public services such as village websites. This research aims to analyze and mitigate web application vulnerabilities using the Penetration Testing Execution Standard (PTES) method with Acunetix and Nessus tools. The test was conducted on the website of Kediri Selatan Village, West Lombok Regency. To avoid risks to the production system, the test used a replica of the website. The testing process follows the PTES stages: pre-engagement, intelligence gathering, vulnerability analysis, exploitation, and reporting. The scan results showed medium and low-category vulnerabilities from Acunetix and two critical vulnerabilities from Nessus. Although automated tests did not detect SQL injection and XSS vulnerabilities, manual exploitation proved their existence. Mitigation was performed with input validation and script filters, which proved to eliminate the vulnerabilities on retest. This research provides an applicable security implementation model that can be adapted by other web services for villages.