docs(lab5): add lab5 submission - SAST/multi-approach DAST security analysis

[3llimi]

Goal

Complete Lab 5 — SAST & DAST security analysis of OWASP Juice Shop v19.0.0.
Performed static analysis with Semgrep and dynamic analysis with ZAP, Nuclei, Nikto, and SQLmap.
Correlated findings across all tools to produce a comprehensive security assessment.

Changes

• labs/submission5.md — full lab report covering SAST, DAST, and correlation analysis
• labs/lab5/semgrep/semgrep-results.json — Semgrep JSON output (25 findings)
• labs/lab5/semgrep/semgrep-report.txt — Semgrep human-readable report
• labs/lab5/zap/report-noauth.html — ZAP unauthenticated baseline scan report
• labs/lab5/report-auth.html — ZAP authenticated scan report (2 High, 8 Medium, 8 Low)
• labs/lab5/scripts/zap-auth.yaml — ZAP Automation Framework config with admin credentials
• labs/lab5/nuclei/nuclei-results.json — Nuclei scan output (25 matches)
• labs/lab5/nikto/nikto-results.txt — Nikto scan output (82 findings)
• labs/lab5/sqlmap/ — SQLmap output confirming SQLi on search endpoint

Testing

• Semgrep scanned 1,014 files with 140 rules — 25 findings confirmed
• ZAP unauthenticated baseline: 95 URLs, 10 warnings
• ZAP authenticated scan: 499 URLs (112 spider + 387 AJAX), 18 alerts including 2 High
• Nuclei completed in under 3 minutes — 25 matches including exposed /metrics endpoint
• Nikto completed in 158 seconds — 82 findings including missing security headers and /ftp/ exposure
• SQLmap confirmed boolean-based blind SQL injection on /rest/products/search?q=* with working payload in 40 requests

Artifacts & Screenshots

• labs/lab5/report-auth.html — Full ZAP authenticated scan report (open in browser)
• labs/lab5/semgrep/semgrep-results.json — Machine-readable SAST findings
• labs/lab5/nuclei/nuclei-results.json — Nuclei template matches
• labs/lab5/nikto/nikto-results.txt — Nikto server scan output
• SQLmap confirmed payload: ') AND 3692=3692 AND ('DEov' LIKE 'DEov on search endpoint

---

Checklist

• PR title is clear and descriptive
• Documentation updated if needed
• No secrets or large temporary files committed