feat(lab5): SAST + DAST — ZAP baseline + auth + Semgrep + correlation

[Basinkse21]

Goal

Run DAST (ZAP baseline + authenticated) and SAST (Semgrep) against Juice Shop v20.0.0, and correlate a vulnerability found by both.

Changes

• submissions/lab5.md — ZAP severity tables + auth-only alerts, Semgrep top rules + triage + FP, SAST/DAST correlation

Testing

• ZAP baseline: 9 alert types (0 High); authenticated: 12 types incl. 1 High (SQL Injection)
• Semgrep: 22 findings (12 ERROR / 10 WARNING); top rule = express-sequelize-injection (6)
• Correlation: SQL Injection confirmed by both — ZAP /rest/products/search?q='( ↔ Semgrep routes/search.ts:23

---

Checklist

• Task 1 — ZAP baseline + auth + ratio analysis
• Task 2 — Semgrep top-10 + triage + FP
• Bonus — SAST/DAST correlation with code + payload + fix