The Penetration Tester's Guide to Web Applications - Borso (IEEE, 2019)