1 of 14

PORTFOLIO

CYBER SECURITY

Kevin Dwira Al Fathan

2 of 14

Computer Engineering Student

Kevin Dwira Al Fathan

ABOUT ME

Introducing

Mahasiswa Teknologi Rekayasa Komputer di Sekolah Vokasi IPB dengan latar belakang jaringan komputer yang kuat. Saat ini aktif mengembangkan diri di bidang Cybersecurity dengan kapabilitas di sisi Offensive (Penetration Testing) maupun Defensive (Digital Forensics & Incident Response).

3 of 14

NOC Support Intern

PT. Telkom Akses Bogor

    • Monitoring jaringan dan memastikan availability layanan telekomunikasi
    • Penanganan gangguan jaringan dan eskalasi insiden
    • Pengalaman langsung dengan infrastruktur jaringan skala enterprise

WORK

EXPERIENCE

4 of 14

CERTIFICATE

5 of 14

PENETRATION TESTING DIBIMBINGSHOP

Project 1

    • Target: Aplikasi e-commerce DibimbingShop (dibishop.duckdns.org)
    • Tipe: Black box
    • Scope: Seluruh endpoint publik
    • Rules of Engagement: Scanning aktif & eksploitasi manual diizinkan; No DoS, No defacing, No perusakan data permanen
    • Metodologi: Reconnaissance → Scanning → Exploitation → Post-Exploitation → Reporting

​

BACKGROUND & SCOPE

6 of 14

PENETRATION TESTING DIBIMBINGSHOP

Project 1

    • Reconnaissance: OSINT, port scanning (Nmap)
    • Vulnerability Identification: Manual testing, automated scanning, static code analysis dari source code
    • Exploitation: Eksploitasi manual per temuan, PoC dokumentasi
    • Post-Exploitation: Attack chain mapping, analisis dampak bisnis
    • Reporting: Dokumentasi lengkap temuan, CVSS scoring, rekomendasi mitigasi

​

METHODOLOGY

7 of 14

PENETRATION TESTING DIBIMBINGSHOP

Project 1

Total: 14 Vulnerabilities - 2 Critical, 7 High, 5 Medium

KEY FINDINGS & ATTACK CHAIN

    • .git Exposed → Source Code Leak
    • SQL Injection → Database Dump → Password Plaintext Exposed
    • Admin Panel Compromised → Stored XSS → Persistent Backdoor
    • Payment Bypass (SQLi) + Price Manipulation → Financial Fraud

8 of 14

PENETRATION TESTING DIBIMBINGSHOP

Project 1

Risk Level: KRITIS

RESULT & IMPACT

    • Dampak bisnis yang berhasil didemonstrasikan:
    • Seluruh data customer & admin berhasil dieksfiltrasi
    • Akses penuh ke admin panel
    • Backdoor admin persisten berhasil ditanam
    • Pembelian produk dengan harga Rp 0
    • Bypass verifikasi pembayaran

Root cause: Tidak ada prepared statements dan tidak ada server-side validation

9 of 14

PENETRATION TESTING DIBIMBINGSHOP

Project 1

Prioritas mitigasi:

REMEDIATION

    • 0 - 48 jam: Hapus fetch_password.php, implement prepared statements, blokir .git access
    • 1 minggu: Migrasi ke bcrypt, ganti cart identifier
    • 2 - 4 minggu: SSL/TLS, CSRF token, update dependencies, security headers

10 of 14

DIGITAL FORENSIC INVESTIGATION DIBIMBINGSHOP

Project 2

    • Tipe: Defensive, Read-only investigation
    • Target: Server & aplikasi web DibimbingShop
    • Periode investigasi: September 2025 – April 2026
    • Sumber bukti: Web server logs, SSH auth logs, MySQL query logs, SIEM (Wazuh), database backup, source code, konfigurasi server
    • Objective: Identifikasi ancaman aktif, analisis insiden, rekomendasi perbaikan

BACKGROUND & SCOPE

11 of 14

Project 2

Total: 12 Temuan - 7 Critical, 4 Medium, 1 Informational

KEY FINDINGS & ATTACK CHAIN

    • SSH Misconfiguration
    • SSH Brute Force Berhasil - 7 Oktober 2025 (Root Login)
    • Akses root dipertahankan ±7 bulan
    • Data Exfiltration - 28 April 2026 (Seluruh database: admins, customers, payments)

DIGITAL FORENSIC INVESTIGATION DIBIMBINGSHOP

12 of 14

Project 2

Kronologi insiden:

    • 25 - 29 Sep 2025: Serangan awal ke aplikasi web dari berbagai penyerang
    • 7 Okt 2025: Root login berhasil via SSH brute force
    • 28 Apr 2026: Database exfiltration

TIMELINE & IMPACT

Dampak:

    • Server sepenuhnya dikompromis sejak Oktober 2025
    • Data breach terkonfirmasi: admin, customer, payment records
    • Akses tidak sah berlangsung selama ±7 bulan tanpa terdeteksi

DIGITAL FORENSIC INVESTIGATION DIBIMBINGSHOP

13 of 14

Project 2

Prioritas mitigasi:

REMEDIATION

    • 0 - 24 jam: Disable PasswordAuthentication & PermitRootLogin, hapus DB dump dari web dir, blokir IP penyerang, reset semua credentials
    • 1 - 2 minggu: Refactor ke prepared statements, implement fail2ban, patch Shellshock, perbaiki log permissions
    • 1 bulan+: Deploy WAF, SIEM monitoring berkelanjutan, penetration testing berkala

DIGITAL FORENSIC INVESTIGATION DIBIMBINGSHOP

14 of 14

kevinalfathan76@gmail.com

LinkedIn/kevinalfathan

THANK

YOU