Website Vulnerability Testing and Analysis of Website Application Using OWASP

Many businesses, organizations, and social institutions use websites to support their main tasks. The various benefits of the website must be supported by security aspects in order avoid hacking. Cyber attacks or hackers can do dangerous things like get more valuable data. So it is necessary test a good find out level vulnerability application features it. A suitable for where distributed over network grey box penetration test. This study performs testing technique using OWASP method ZAP tool. steps are collecting target information, performing automatic scanning with help ZAP, exploiting scan results, reporting, providing recommendations. results show has 12 vulnerabilities 8.3% at high 1 alert, 41.7% medium 5 alerts, 33.3% low 4 16.7 informational 2 alerts. These related matters A01-Broken Access Control, A03-Injection, A05-Security Misconfiguration, A08-Software Data Integrity Failures.