java-file-read-audit

Java Web source-code arbitrary file read vulnerability auditing tool. Identifies all file-read operations in source code and analyzes path traversal risks. Useful for: (1) identifying file-reading frameworks and implementations, (2) finding arbitrary file-read vulnerabilities, (3) assessing path traversal attack risks, and (4) auditing file-path parameter validation logic. Supports BufferedReader, Scanner, Files.lines/readAllLines/readAllBytes and other methods. Supports decompiling .class/.jar files to extract file operation logic. When combined with java-route-mapper, it can perform end-to-end route + file-read auditing.