SISTEM OTOMATISASI RECONNAISSANCE MENGGUNAKAN MODEL OSINT UNTUK MENINGKATKAN KEAMANAN SISTEM INFORMASI PADA UNIVERSITAS MUHAMMADIYAH MAKASSAR

Muh. Fikri Haekal; Muhammad Faisal; Muhyiddin A.M. Hayat

doi:10.59003/nhj.v6i3.2341

Authors

Muh. Fikri Haekal Universitas Muhammadiyah Makassar
Muhammad Faisal Universitas Muhammadiyah Makassar
Muhyiddin A.M. Hayat Universitas Muhammadiyah Makassar

DOI:

https://doi.org/10.59003/nhj.v6i3.2341

Keywords:

Automated Reconnaissance, OSINT, Cybersecurity, Information Security, Vulnerability Assessment.

Abstract

The development of digital technology provides opportunities to develop more interactive learning media through the integration of cybersecurity systems. However, applications that integrate automated reconnaissance with Open-Source Intelligence (OSINT) models are still challenging to implement, especially in terms of system integration and device limitations. This study aims to develop an automated reconnaissance system based on OSINT to identify exposed digital assets at Muhammadiyah University of Makassar. The application was developed using Python and Flask framework, with various OSINT modules integrated including WHOIS lookup, DNS analysis, port scanning, subdomain enumeration, vulnerability scanning, social OSINT, dark web intelligence, and Google dorking. The system was evaluated using Black Box Testing and functional testing methods. Black Box Testing results showed that most main functions operated according to designed scenarios, although several functions were partially successful due to OCR image quality and system integration limitations. The developed application can function as proactive security monitoring media for universities, providing essential technical instruments for IT administrators to map potential data breaches early, enabling proactive mitigation steps and strengthening information system security posture.

Downloads

Download data is not yet available.

References

Al-amien, M. F. (2025). Risiko Keamanan TI Akibat Kelalaian Mahasiswa Non-IT dalam Keamanan Siber: Tinjauan Etis dan Solusi Preventif. Research Gate. https://doi.org/10.13140/RG.2.2.14416.62723

Bizouarn, K. M., Abdulnabi, M., & Tan, J. (2023). OSINT and AI: A Powerful Combination for Company Vulnerability Detection. 2023 IEEE 21st Student Conference on Research and Development, SCOReD 2023, 246–250. https://doi.org/10.1109/SCOReD60679.2023.10563226

Bua, I. T., & Idris, N. I. (2025). Analisis Kebijakan Keamanan Siber di Indonesia: Studi Kasus Kebocoran Data Nasional pada Tahun 2024. Desentralisasi: Jurnal Hukum, Kebijakan Publik, Dan Pemerintahan, 2(2), 100–114. https://doi.org/10.62383/desentralisasi.v2i2.653

Devireddy, I. R., Samual, J., & Machap, K. (2026). OSINT Toolkit for Reconnaissance phase of Penetration Testing. Journal of Applied Technology and Innovation, 8(1), 40–44. https://doi.org/10.65136/jati.v8i1.63

Gao, P., Liu, X., Choi, E., Ma, S., Yang, X., & Song, D. (2024). ThreatKG: An AI-Powered System for Automated Open-Source Cyber Threat Intelligence Gathering and Management. LAMPS 2024 - Proceedings of the 1st ACM Workshop on Large AI Systems and Models with Privacy and Safety Analysis. https://doi.org/10.1145/3689217.3690613

Hoffman, F. (2025). Rebranding second-generation open-source intelligence: "It's not your father's OSINT". Intelligence Journal, 26(3), 61–74.

Khan, S., & Wallom, D. (2022). A system for organizing, collecting, and presenting open-source intelligence. Journal of Data, Information and Management, 4(2), 107–117. https://doi.org/10.1007/s42488-022-00068-4

Ningrum, F. A. S., Riwanto, Y., Pratiwi, I. Y. R., & Fikri, M. A. (2024). Analisis Keamanan Sistem Informasi Perguruan Tinggi Berbasis Indeks KAMI. Jurnal Informatika Polinema, 10(3), 437–444. https://doi.org/10.33795/jip.v10i3.5154

Prasetyo, D., Sebayang, N., & Dillianto, B. (2023). Pemanfaatan Open Source Intelligence dalam Membantu Tugas TNI untuk Melindungi Pertahanan Negara. JIIP - Jurnal Ilmiah Ilmu Pendidikan, 6(10), 7963–7966. https://doi.org/10.54371/jiip.v6i10.3016

Rahman, M. R., Hezaveh, R. M., & Williams, L. (2023). What Are the Attackers Doing Now? Automating Cyberthreat Intelligence Extraction from Text on Pace with the Changing Threat Landscape: A Survey. ACM Computing Surveys, 55(12), 1–35. https://doi.org/10.1145/3571726

Ramadhan, R. A., Aresta, R. M., & Hariyadi, D. (2020). Sudomy: Information Gathering Tools for Subdomain Enumeration and Analysis. IOP Conference Series: Materials Science and Engineering, 771(1). https://doi.org/10.1088/1757-899X/771/1/012019

Santa, K., Radjakore, E., Lahutung, R. A., Pangalila, R. P., & Deil, T. V. (2025). Ethical Hacking Sebagai Strategi Keamanan Cyber di Era Digital: Studi Pustaka dan Implementasi Dasar. Jurnal Ilmiah Teknik Informatika Dan Komunikasi, 5(2), 548–553. https://doi.org/10.55606/juitik.v5i2.1183

Santoso, J. T. (2023). Teknologi Keamanan Siber (Cyber Security). Penerbit Yayasan Prima Agus Teknik.

Saraswathi, V. R., Ahmed, I. S., Reddy, S. M., Akshay, S., Reddy, V. M., & Reddy, S. M. (2022). Automation of Recon Process for Ethical Hackers. 2022 International Conference for Advancement in Technology, ICONAT 2022. https://doi.org/10.1109/ICONAT53423.2022.9726077

Sarjito, A. (2024). The Impact of Intelligence Gathering, Risk Analysis, and Scenario Planning on Defense Policy Formulation. International Journal Administration, Business & Organization, 5(3), 27–46. https://doi.org/10.61242/ijabo.24.396

Shoffa, I. M. (2025). Parenting Era Digital: Pemanfaatan Open Source Intelligence untuk Meningkatkan Literasi Audio Visual Anak. Jurnal Pendidikan, 3(4), 4853–4856.

Stamme, M. I. W. (2025). The Best Disinfectant: The Value of Transparency in Information Operations. Intelligence and National Security, 16(1).

Szymoniak, S., Foks, K., & Pyrkosz-Dziubczyk, A. (2025). Application of OSINT Methods in Ensuring Cybersecurity. IPSI Transactions on Internet Research, 21(2), 38. https://doi.org/10.58245/ipsi.tir.2502.05