SAST vs DAST Testing Coverage

SAST Only:
- Null pointer dereference
- Threading issues
- Code quality issues
- Issues in dead code
- Insecure crypto functions
- Issues in back-end application code
- Complex injection issues
- Issues in non-web app code

 DAST Only:
- Environment configuration issues
- Patch level issues
- Runtime privileges issues
- Authentication issues
- Protocol Parser Issues
- Session management Issues
- Issues in 3rd party web components
- Malware analysis

 DAST AND SAST:
- SQL injections
- Cross-site scripting
- HTTP Response Splitting
- OS Commanding
- LDAP injection
- XPATH injection
- Path traversal
- Buffer overflows
- Format String Issues