Uji Keamanan Website Terhadap Serangan Path Traversal (Studi Kasus Website Pendataan Warga)

Abstract

Website security is very important because website is targeted hacker to exploit actions that can harm the website itself. One of them is a Path Traversal attack that allows an attacker to access file, directory and commands that are potentially outside the root directory of web document. To find out how a website was broken or in other words hack with Path Traversal technique, then make an analysis of the Path Traversal attack. The purpose of this research is to study Path Traversal attack, find out how to anallyze website security and find solutions to overcome wibsite security problem against Path Traversal attack. In this research conducted using the OWASP ZAP scaning application program to clearly see the vulnerability on a website. Based on the analysis of Path Traversal attack on the citizens collection website, it can be seen that when access to the directory is not protected it will be a gap for the attacker can access or retrieve important files in the app. To minimize Path Traversal attack add an .htaccess file or index.php of all folder.