Melola Discovery

← Melola Discovery

Open access Jurnal SINTA 2

The Role of Advanced Penetration Testing Techniques in Enhancing Cybersecurity: A Survey on Web Application Security

JUTI: Jurnal Ilmiah Teknologi Informasi · Vol. 24 No. 1 (2026) · pp. 87–118

DOI
10.12962/j24068535.v24i1.a1372
ISSN
2406-8535, 1412-6389
Published
2026-01-15
Publisher
Institut Teknologi Sepuluh Nopember
Language
eng
License
creativecommons.org/licenses/by-sa/4.0

Abstract

The Internet continues to grow as an exciting platform for numerous web applications, providing crucial services to various industries and user communities. However, this expansion comes with an increase in cybersecurity threats, as web applications continue to be a primary target for malicious entities. Despite the creation of numerous security frameworks, yearly reports and the OWASP (Open Web Application Security Project) Top 10 consistently highlight the ongoing presence of severe vulnerabilities in contemporary web platforms. This paper examines the significance of advanced penetration testing methods in enhancing cybersecurity, particularly in the context of web application security. Utilizing a combination of manual and automated testing approaches, incorporating tools such as BURP SUITE and METASPLOIT, this study examines how sophisticated penetration testing can uncover, exploit, and address vulnerabilities, including SQL injections, cross-site scripting (XSS), and weak authentication methods. The results highlight that even small vulnerabilities can have significant practical impacts, emphasizing the importance of ongoing, intelligent testing approaches.

Collaboration network of the authors

5 authors · 10 co-authorship links

Hover or tap a name to highlight its co-authors. Double-click to open the author's page.

  • University of Kigali
  • Different organisations
  • Same organisation
  • Affiliation unknown
  • Thicker line = more joint articles · bigger circle = more articles
Show as table
Co-authorOrganisationJoint articles

Affiliations come from OpenAlex; journal OAI-PMH metadata carries none. Authors without an OpenAlex ID are matched by name, which can merge or split people.

Metadata source: OAI-PMH (metadata jurnal) https://juti.if.its.ac.id/index.php/juti/oai, first harvested 26 Okt 2026, last seen 1 Nov 2026.
Original metadata (oai_dc) 
<oai_dc:dc xmlns="http://www.openarchives.org/OAI/2.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:oai_dc="http://www.openarchives.org/OAI/2.0/oai_dc/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.openarchives.org/OAI/2.0/oai_dc/  http://www.openarchives.org/OAI/2.0/oai_dc.xsd">
	<dc:title xml:lang="en">The Role of Advanced Penetration Testing Techniques in Enhancing   Cybersecurity: A Survey on Web Application Security</dc:title>
	<dc:creator xml:lang="en">BUGINGO, EMMANUEL</dc:creator>
	<dc:creator xml:lang="en">ISHIMWE, Voltaire</dc:creator>
	<dc:creator xml:lang="en">UWASE SIMBI, Ghislaine</dc:creator>
	<dc:creator xml:lang="en">DUSENGE, Adeline</dc:creator>
	<dc:creator xml:lang="en">NIZEYIMANA, Jean Baptiste</dc:creator>
	<dc:description xml:lang="en">The Internet continues to grow as an exciting platform for numerous web applications, providing crucial services to various industries and user communities. However, this expansion comes with an increase in cybersecurity threats, as web applications continue to be a primary target for malicious entities. Despite the creation of numerous security frameworks, yearly reports and the OWASP (Open Web Application Security Project) Top 10 consistently highlight the ongoing presence of severe vulnerabilities in contemporary web platforms. This paper examines the significance of advanced penetration testing methods in enhancing cybersecurity, particularly in the context of web application security. Utilizing a combination of manual and automated testing approaches, incorporating tools such as BURP SUITE and METASPLOIT, this study examines how sophisticated penetration testing can uncover, exploit, and address vulnerabilities, including SQL injections, cross-site scripting (XSS), and weak authentication methods. The results highlight that even small vulnerabilities can have significant practical impacts, emphasizing the importance of ongoing, intelligent testing approaches.</dc:description>
	<dc:publisher xml:lang="en">Institut Teknologi Sepuluh Nopember</dc:publisher>
	<dc:date>2026-01-15</dc:date>
	<dc:type>info:eu-repo/semantics/article</dc:type>
	<dc:type>info:eu-repo/semantics/publishedVersion</dc:type>
	<dc:type xml:lang="en">Peer-reviewed Article</dc:type>
	<dc:format>application/pdf</dc:format>
	<dc:identifier>https://juti.if.its.ac.id/index.php/juti/article/view/1372</dc:identifier>
	<dc:identifier>10.12962/j24068535.v24i1.a1372</dc:identifier>
	<dc:source xml:lang="en">JUTI: Jurnal Ilmiah Teknologi Informasi; Vol. 24, No. 1, January 2026; 87-118</dc:source>
	<dc:source>2406-8535</dc:source>
	<dc:source>1412-6389</dc:source>
	<dc:source>10.12962/j24068535.v24i1</dc:source>
	<dc:language>eng</dc:language>
	<dc:relation>https://juti.if.its.ac.id/index.php/juti/article/view/1372/586</dc:relation>
	<dc:rights xml:lang="en">Copyright (c) 2026 Emmanuel Bugingo, Voltaire Ishimwe, Ghislaine Uwase Simbi, Adeline Dusenge, Jean Baptiste Nizeyimana</dc:rights>
	<dc:rights xml:lang="en">https://creativecommons.org/licenses/by-sa/4.0</dc:rights>
</oai_dc:dc>