reference.bib

% TODO: xử lí những citation không có author

@online{seclist-fuzzing,
    author = {Daniel Miessler},
    title = "{SecLists/Fuzzing at master · danielmiessler/SecLists}",
    year = 2019,
    url = {https://github.com/danielmiessler/SecLists/tree/master/Fuzzing},
    urldate = {2019-11-25}
}

@online{0verpwn-fuzzing,
    author = {0verpwn},
    title = "{0verpwn/Fuzzing: Fuzzing Payloads to Assist in Web Application Testing.}",
    year = 2019,
    url = {https://github.com/0verpwn/Fuzzing},
    urldate = {2019-11-25}
}

@online{portswigger-directory-traversal,
    author = {PortSwigger Ltd.},
    title = "{What is directory traversal, and how to prevent it?}",
    year = 2019,
    url = {https://portswigger.net/web-security/file-path-traversal},
    urldate = {2019-11-26}
}

@online{burpsuite,
    author = {PortSwigger Ltd.},
    title = "{Burp Suite - Cybersecurity Software from PortSwigger}",
    year = 2019,
    url = {https://portswigger.net/burp},
    urldate = {2019-11-26}
}

@online{owasp-top-10,
    author = "OWASP",
    title = "{Top 10-2017 Top 10 - OWASP}",
    year = 2017,
    url = {https://www.owasp.org/index.php/Top_10-2017_Top_10},
    urldate = {2019-11-26}
}

@book{sullivan2011web,
  title={Web application security, a beginner's guide},
  author={Sullivan, Bryan and Liu, Vincent},
  year={2011},
  publisher={McGraw-Hill Education Group}
}

@inproceedings{KameleonFuzz,
    author = {Duchene, Fabien and Rawat, Sanjay and Richier, Jean-Luc and Groz, Roland},
    year = {2014},
    month = {03},
    pages = {},
    title = {KameleonFuzz: Evolutionary Fuzzing for Black-Box XSS Detection},
    journal = {CODASPY 2014 - Proceedings of the 4th ACM Conference on Data and Application Security and Privacy},
    doi = {10.1145/2557547.2557550}
}

@article{khan2011different,
  title={Different approaches to black box testing technique for finding errors},
  author={Khan, Mohd Ehmer},
  journal={International Journal of Software Engineering \& Applications},
  volume={2},
  number={4},
  pages={31},
  year={2011},
  publisher={Academy \& Industry Research Collaboration Center (AIRCC)}
}

@article{sqli-classification,
    author = {Ahmad, Khaleel},
    year = {2010},
    month = {05},
    pages = {236-242},
    title = {Classification of SQL Injection Attacks},
    volume = {1},
    journal = {VSRD Technical \& Non-Technical Journal}
}

@article{meucci2014owasp,
  title={Owasp testing guide},
  author={Meucci, Matteo and Muller, A},
  journal={v4. 0,//OWASP Foundation},
  number={s 453},
  year={2014}
}

@book{weidman2014penetration,
  title={Penetration testing: a hands-on introduction to hacking},
  author={Weidman, Georgia},
  year={2014},
  publisher={No Starch Press}
}

@online{sqlmap,
    author={Bernardo Damele A. G. \& Miroslav Stampar},
    title = "{sqlmap: automatic SQL injection and database takeover tool}",
    url = {http://sqlmap.org/},
    urldate = {2019-12-08}
}

@book{harper2011gray,
  title={Gray hat hacking the ethical hackers handbook},
  author={Harper, Allen and Harris, Shon and Ness, Jonathan and Eagle, Chris and Lenkey, Gideon and Williams, Terron},
  year={2011},
  publisher={McGraw-Hill Osborne Media}
}

@online{acunetix-tool,
    author={Acunetix},
    title = "{Vulnerability Scanner - Web Application Security | Acunetix}",
    url = {https://www.acunetix.com/vulnerability-scanner/},
    urldate = {2019-12-08}
}

@online{hackertarget-tool,
    author={Acunetix},
    title = "{28 Online Vulnerability Scanners \& Network Tools | HackerTarget.com}",
    url = {https://hackertarget.com/},
    urldate = {2019-12-08}
}

@article{vimpari2015evaluation,
  title={An Evaluation of Free Fuzzing Tools},
  author={Vimpari, Mikko},
  journal={Master's Thesis, University of Oulu},
  year={2015}
}

@online{webfuzzer-gitlab,
    author={Trinh Dang},
    title = "{Đặng Nhật Trình / webfuzzer-nodejs · GitLab}",
    url = {https://gitlab.com/y4t0g4m1/webfuzzer-nodejs},
    urldate = {2020-06-08}
}

@article{li2011survey,
  title={A survey on web application security},
  author={Li, Xiaowei and Xue, Yuan},
  journal={Nashville, TN USA},
  year={2011}
}

@inproceedings{klees2018evaluating,
  title={Evaluating fuzz testing},
  author={Klees, George and Ruef, Andrew and Cooper, Benji and Wei, Shiyi and Hicks, Michael},
  booktitle={Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security},
  pages={2123--2138},
  year={2018},
  organization={ACM}
}

@online{react-reduction-github,
	title = "{reduction-admin/react-reduction: React Reduction - Free Admin Template Built with React and Bootstrap4}",
	url = {https://github.com/reduction-admin/react-reduction},
	urldate = {2020-06-23}
}