php-file-read-audit

Audit PHP file read and path traversal vulnerabilities by applying static analysis to locate sinks like read, include, and require, trace input sources to execution boundaries, and produce verified data flow evidence with controllability analysis.

Tracing PHP include and require sinks requires mapping the complete data flow from source to sink, verifying controllability at execution boundaries, and validating stream wrappers to identify path traversal gaps accurately.

Generate a PoC and remediation guidance for PHP path traversal by analyzing validation gaps along the verified data flow, assessing exploitability levels, and outputting targeted fix recommendations to block unsafe file reads.

Static analysis detects stream wrapper exploits in PHP file read operations by mapping include and require statements, identifying unvalidated input sources, and tracing controllable data flow to the execution sink.

Assess exploitability levels for file read vulnerabilities without dynamic testing by evaluating static validation gaps, verifying controllability of the source-to-sink data flow, and checking execution boundaries within the PHP codebase.