{"id":"https://openalex.org/W7124317626","doi":"https://doi.org/10.12962/j24068535.v24i1.a1372","title":"The Role of Advanced Penetration Testing Techniques in Enhancing Cybersecurity: A Survey on Web Application Security","display_name":"The Role of Advanced Penetration Testing Techniques in Enhancing Cybersecurity: A Survey on Web Application Security","publication_year":2026,"publication_date":"2026-01-15","ids":{"openalex":"https://openalex.org/W7124317626","doi":"https://doi.org/10.12962/j24068535.v24i1.a1372"},"language":"en","primary_location":{"id":"doi:10.12962/j24068535.v24i1.a1372","doi":"https://doi.org/10.12962/j24068535.v24i1.a1372","is_oa":true,"landing_page_url":"https://doi.org/10.12962/j24068535.v24i1.a1372","pdf_url":"https://juti.if.its.ac.id/index.php/juti/article/download/1372/586","source":{"id":"https://openalex.org/S4210190126","display_name":"JUTI Jurnal Ilmiah Teknologi Informasi","issn_l":"1412-6389","issn":["1412-6389","2406-8535"],"is_oa":true,"is_in_doaj":true,"is_core":false,"listed_in":["doaj"],"host_organization":"https://openalex.org/P4310314936","host_organization_name":"Sepuluh Nopember Institute of Technology","host_organization_lineage":["https://openalex.org/P4310314936"],"host_organization_lineage_names":["Sepuluh Nopember Institute of Technology"],"type":"journal"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"JUTI: Jurnal Ilmiah Teknologi Informasi","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://juti.if.its.ac.id/index.php/juti/article/download/1372/586","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5062336190","display_name":"Emmanuel Bugingo","orcid":"https://orcid.org/0000-0001-5176-6821","observed_orcids":["https://orcid.org/0000-0001-5176-6821"]},"institutions":[{"id":"https://openalex.org/I3132931743","display_name":"University of Kigali","ror":"https://ror.org/03v842g47","country_code":"RW","type":"education","lineage":["https://openalex.org/I3132931743"]},{"id":"https://openalex.org/I4210087849","display_name":"University of Rwanda","ror":"https://ror.org/00286hs46","country_code":"RW","type":"education","lineage":["https://openalex.org/I4210087849"]}],"countries":["RW"],"is_corresponding":false,"raw_author_name":"EMMANUEL BUGINGO","raw_affiliation_strings":["University of Rwanda, University of Kigali"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Rwanda, University of Kigali","institution_ids":["https://openalex.org/I3132931743","https://openalex.org/I4210087849"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123134664","display_name":"Voltaire ISHIMWE","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I3132931743","display_name":"University of Kigali","ror":"https://ror.org/03v842g47","country_code":"RW","type":"education","lineage":["https://openalex.org/I3132931743"]}],"countries":["RW"],"is_corresponding":false,"raw_author_name":"Voltaire ISHIMWE","raw_affiliation_strings":["University of Kigali"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Kigali","institution_ids":["https://openalex.org/I3132931743"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123128426","display_name":"Ghislaine UWASE SIMBI","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I3132931743","display_name":"University of Kigali","ror":"https://ror.org/03v842g47","country_code":"RW","type":"education","lineage":["https://openalex.org/I3132931743"]}],"countries":["RW"],"is_corresponding":false,"raw_author_name":"Ghislaine UWASE SIMBI","raw_affiliation_strings":["University of Kigali"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Kigali","institution_ids":["https://openalex.org/I3132931743"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123102124","display_name":"Adeline DUSENGE","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I3132931743","display_name":"University of Kigali","ror":"https://ror.org/03v842g47","country_code":"RW","type":"education","lineage":["https://openalex.org/I3132931743"]}],"countries":["RW"],"is_corresponding":false,"raw_author_name":"Adeline DUSENGE","raw_affiliation_strings":["University of Kigali"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Kigali","institution_ids":["https://openalex.org/I3132931743"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5008857309","display_name":"Jean Baptiste Nizeyimana","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I3132931743","display_name":"University of Kigali","ror":"https://ror.org/03v842g47","country_code":"RW","type":"education","lineage":["https://openalex.org/I3132931743"]}],"countries":["RW"],"is_corresponding":false,"raw_author_name":"Jean Baptiste NIZEYIMANA","raw_affiliation_strings":["University of Kigali"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Kigali","institution_ids":["https://openalex.org/I3132931743"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.5439,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.91047798,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":92,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"87","last_page":"118"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/penetration-testing","display_name":"penetration testing","score":0.9729999899864197},{"id":"https://openalex.org/keywords/web-application-security","display_name":"web application security","score":1.0},{"id":"https://openalex.org/keywords/owasp-top-10","display_name":"OWASP Top 10","score":0.8140000104904175},{"id":"https://openalex.org/keywords/sql-injection","display_name":"SQL injection","score":0.9869999885559082},{"id":"https://openalex.org/keywords/cross-site-scripting","display_name":"cross-site scripting","score":1.0},{"id":"https://openalex.org/keywords/weak-authentication","display_name":"weak authentication","score":0.9760000109672546},{"id":"https://openalex.org/keywords/burp-suite","display_name":"Burp Suite","score":0.7239999771118164},{"id":"https://openalex.org/keywords/metasploit","display_name":"Metasploit","score":0.9980000257492065},{"id":"https://openalex.org/keywords/vulnerability-exploitation","display_name":"vulnerability exploitation","score":0.6480000019073486}],"concepts":[{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.820900022983551},{"id":"https://openalex.org/C42989059","wikidata":"https://www.wikidata.org/wiki/Q7978626","display_name":"Web testing","level":5,"score":0.6169999837875366},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6043000221252441},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.5929999947547913},{"id":"https://openalex.org/C39569185","wikidata":"https://www.wikidata.org/wiki/Q371199","display_name":"Cross-site scripting","level":5,"score":0.5730000138282776},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5633000135421753},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.5138999819755554},{"id":"https://openalex.org/C79373723","wikidata":"https://www.wikidata.org/wiki/Q386275","display_name":"Web development","level":3,"score":0.49869999289512634},{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.47510001063346863},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4510999917984009},{"id":"https://openalex.org/C22111027","wikidata":"https://www.wikidata.org/wiki/Q1070427","display_name":"Internet security","level":4,"score":0.4300999939441681},{"id":"https://openalex.org/C35578498","wikidata":"https://www.wikidata.org/wiki/Q193424","display_name":"Web service","level":2,"score":0.42890000343322754},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.4246000051498413},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.4066999852657318},{"id":"https://openalex.org/C97200028","wikidata":"https://www.wikidata.org/wiki/Q1196135","display_name":"Web engineering","level":5,"score":0.4011000096797943},{"id":"https://openalex.org/C130436687","wikidata":"https://www.wikidata.org/wiki/Q7978591","display_name":"Web modeling","level":3,"score":0.39469999074935913},{"id":"https://openalex.org/C182321512","wikidata":"https://www.wikidata.org/wiki/Q1153289","display_name":"Web standards","level":3,"score":0.38420000672340393},{"id":"https://openalex.org/C150451098","wikidata":"https://www.wikidata.org/wiki/Q506059","display_name":"SQL injection","level":5,"score":0.3837999999523163},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.3449000120162964},{"id":"https://openalex.org/C80107235","wikidata":"https://www.wikidata.org/wiki/Q7162625","display_name":"Penetration (warfare)","level":2,"score":0.31520000100135803},{"id":"https://openalex.org/C79581498","wikidata":"https://www.wikidata.org/wiki/Q1367530","display_name":"Suite","level":2,"score":0.29440000653266907},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.2888999879360199},{"id":"https://openalex.org/C516187249","wikidata":"https://www.wikidata.org/wiki/Q10719477","display_name":"Web analytics","level":5,"score":0.28870001435279846},{"id":"https://openalex.org/C77109596","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Application security","level":5,"score":0.27730000019073486},{"id":"https://openalex.org/C521306242","wikidata":"https://www.wikidata.org/wiki/Q190637","display_name":"Web design","level":3,"score":0.2766000032424927},{"id":"https://openalex.org/C11392498","wikidata":"https://www.wikidata.org/wiki/Q11288","display_name":"Web server","level":3,"score":0.26440000534057617}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.12962/j24068535.v24i1.a1372","doi":"https://doi.org/10.12962/j24068535.v24i1.a1372","is_oa":true,"landing_page_url":"https://doi.org/10.12962/j24068535.v24i1.a1372","pdf_url":"https://juti.if.its.ac.id/index.php/juti/article/download/1372/586","source":{"id":"https://openalex.org/S4210190126","display_name":"JUTI Jurnal Ilmiah Teknologi Informasi","issn_l":"1412-6389","issn":["1412-6389","2406-8535"],"is_oa":true,"is_in_doaj":true,"is_core":false,"listed_in":["doaj"],"host_organization":"https://openalex.org/P4310314936","host_organization_name":"Sepuluh Nopember Institute of Technology","host_organization_lineage":["https://openalex.org/P4310314936"],"host_organization_lineage_names":["Sepuluh Nopember Institute of Technology"],"type":"journal"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"JUTI: Jurnal Ilmiah Teknologi Informasi","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.12962/j24068535.v24i1.a1372","doi":"https://doi.org/10.12962/j24068535.v24i1.a1372","is_oa":true,"landing_page_url":"https://doi.org/10.12962/j24068535.v24i1.a1372","pdf_url":"https://juti.if.its.ac.id/index.php/juti/article/download/1372/586","source":{"id":"https://openalex.org/S4210190126","display_name":"JUTI Jurnal Ilmiah Teknologi Informasi","issn_l":"1412-6389","issn":["1412-6389","2406-8535"],"is_oa":true,"is_in_doaj":true,"is_core":false,"listed_in":["doaj"],"host_organization":"https://openalex.org/P4310314936","host_organization_name":"Sepuluh Nopember Institute of Technology","host_organization_lineage":["https://openalex.org/P4310314936"],"host_organization_lineage_names":["Sepuluh Nopember Institute of Technology"],"type":"journal"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"JUTI: Jurnal Ilmiah Teknologi Informasi","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7124317626.pdf","grobid_xml":"https://content.openalex.org/works/W7124317626.grobid-xml"},"referenced_works_count":42,"referenced_works":["https://openalex.org/W1485917824","https://openalex.org/W1695868552","https://openalex.org/W1977764760","https://openalex.org/W2003115932","https://openalex.org/W2006591097","https://openalex.org/W2007999111","https://openalex.org/W2022724444","https://openalex.org/W2033742178","https://openalex.org/W2038121473","https://openalex.org/W2079333567","https://openalex.org/W2295141584","https://openalex.org/W2524888652","https://openalex.org/W2529831505","https://openalex.org/W2618369544","https://openalex.org/W2620487885","https://openalex.org/W2782016050","https://openalex.org/W2789471414","https://openalex.org/W2794656545","https://openalex.org/W2796056969","https://openalex.org/W2801939996","https://openalex.org/W2810607117","https://openalex.org/W2885407417","https://openalex.org/W2894043771","https://openalex.org/W2979496624","https://openalex.org/W2997258927","https://openalex.org/W3011450857","https://openalex.org/W3011623185","https://openalex.org/W3036035276","https://openalex.org/W3109205935","https://openalex.org/W3118841282","https://openalex.org/W3133768322","https://openalex.org/W3196760563","https://openalex.org/W3204235105","https://openalex.org/W4205633510","https://openalex.org/W4212937412","https://openalex.org/W4238821156","https://openalex.org/W4253752618","https://openalex.org/W4293569719","https://openalex.org/W4323317130","https://openalex.org/W4380367456","https://openalex.org/W4380682042","https://openalex.org/W4388694846"],"related_works":["https://openalex.org/W7218119786","https://openalex.org/W4400695905","https://openalex.org/W4414568497","https://openalex.org/W4323317130","https://openalex.org/W4384257736","https://openalex.org/W2391100127","https://openalex.org/W4408857426","https://openalex.org/W7131847798","https://openalex.org/W7160239854","https://openalex.org/W4410758499"],"abstract_inverted_index":{"The":[0,136],"Internet":[1],"continues":[2],"to":[3,16,36],"grow":[4],"as":[5,32,108],"an":[6,27],"exciting":[7],"platform":[8],"for":[9,41],"numerous":[10,48],"web":[11,33,73,93],"applications,":[12],"providing":[13],"crucial":[14],"services":[15],"various":[17],"industries":[18],"and":[19,53,101,111,123,132],"user":[20],"communities.":[21],"However,":[22],"this":[23,113],"expansion":[24],"comes":[25],"with":[26],"increase":[28],"in":[29,71,85,89],"cybersecurity":[30],"threats,":[31],"applications":[34],"continue":[35],"be":[37],"a":[38,97],"primary":[39],"target":[40],"malicious":[42],"entities.":[43],"Despite":[44],"the":[45,54,65,78,90,149],"creation":[46],"of":[47,68,80,92,99,151],"security":[49],"frameworks,":[50],"yearly":[51],"reports":[52],"OWASP":[55],"(Open":[56],"Web":[57],"Application":[58],"Security":[59],"Project)":[60],"Top":[61],"10":[62],"consistently":[63],"highlight":[64,138],"ongoing":[66],"presence":[67],"severe":[69],"vulnerabilities":[70,142],"contemporary":[72],"platforms.":[74],"This":[75],"paper":[76],"examines":[77,115],"significance":[79],"advanced":[81],"penetration":[82,118],"testing":[83,103,119,154],"methods":[84],"enhancing":[86],"cybersecurity,":[87],"particularly":[88],"context":[91],"application":[94],"security.":[95],"Utilizing":[96],"combination":[98],"manual":[100],"automated":[102],"approaches,":[104],"incorporating":[105],"tools":[106],"such":[107],"BURP":[109],"SUITE":[110],"METASPLOIT,":[112],"study":[114],"how":[116],"sophisticated":[117],"can":[120,143],"uncover,":[121],"exploit,":[122],"address":[124],"vulnerabilities,":[125],"including":[126],"SQL":[127],"injections,":[128],"cross-site":[129],"scripting":[130],"(XSS),":[131],"weak":[133],"authentication":[134],"methods.":[135],"results":[137],"that":[139],"even":[140],"small":[141],"have":[144],"significant":[145],"practical":[146],"impacts,":[147],"emphasizing":[148],"importance":[150],"ongoing,":[152],"intelligent":[153],"approaches.":[155]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2026-01-16T00:00:00"}