Feature/lab5

[ArthurBabkin]

Goal

Add Lab 5 submission: static and dynamic security analysis of OWASP Juice Shop.

Changes

• Ran Semgrep SAST on Juice Shop source (140 rules, 25 findings)
• ZAP unauthenticated baseline + authenticated scan (auth via Automation Framework)
• Nuclei, Nikto, SQLmap scans with full output artifacts
• SAST/DAST correlation analysis
• Documented findings in labs/submission5.md

Testing

• Task 1 done — SAST Analysis with Semgrep
• Task 2 done — DAST Analysis (ZAP + Nuclei + Nikto + SQLmap)
• Task 3 done — SAST/DAST Correlation

Artifacts & Screenshots

• labs/lab5/semgrep/ — Semgrep JSON + text report
• labs/lab5/zap/ — ZAP noauth + auth HTML/JSON reports
• labs/lab5/nuclei/ — Nuclei JSONL results
• labs/lab5/nikto/ — Nikto text report
• labs/lab5/sqlmap/ — SQLmap CSV results
• labs/lab5/analysis/ — sast-analysis.txt, correlation.txt

---

Checklist

• PR title is clear and describes the changes
• Documentation updated if needed
• No secrets, API keys, or large temp files in commits