Vulnerability Assessment Report - Website PEMPROV SULUT

Target Information

Target ID:

f326bfcf-7ea4-49da-9b96-dfb6ee1fc228

Target URL:

sulutprov.go.id

Website Name:

Website PEMPROV SULUT

Date Submitted:

July 10, 2025

Last Pen-Tested:

July 18, 2025

✅ PASSED

96%

Security Score

15

Tests Performed

0

Critical Issues

2

Recommendations

Security Score Breakdown

SSL/TLS Security

100%

XSS Protection

100%

CSRF Protection

100%

SQL Injection

100%

Authentication Bypass

70%

Directory Traversal

100%

Session Management

100%

Upload Security

100%

Detailed Test Results

Test Category	Status	Risk Level	Description
SSL/TLS Configuration	PASS	Low	Strong encryption protocols implemented
Cross-Site Scripting (XSS)	PASS	Low	Input validation and output encoding present
SQL Injection	PASS	Low	Parameterized queries detected
CSRF Protection	PASS	Low	CSRF tokens properly implemented
Directory Traversal	PASS	Low	Path validation mechanisms in place
Authentication Bypass	WARN	Medium	Consider implementing 2FA
Session Management	PASS	Low	Secure session handling implemented
File Upload Security	PASS	Low	File type validation and sanitization present

Security Recommendations

Medium Priority

Implement Two-Factor Authentication (2FA) for enhanced account security.

Low Priority

Consider implementing Content Security Policy (CSP) headers for additional XSS protection.

Badge

Salin kode di bawah ini dan tempel di footer website Anda untuk menampilkan badge.

HTML

        <a href="https://web.sulutprov.go.id/vulnerability-test/status/sulutprov.go.id" target="_blank" rel="noopener noreferrer">
  <img
    src="https://web.sulutprov.go.id/static/imgs/sulutdev_badge.png"
    alt="Vulnerability Test Badge - ✅ PASSED"
    width="130"
  />
</a>
      

Preview Badge

Ilustrasi tampilan badge yang ditaruh pada bagian footer website Anda.

https://sulutprov.go.id