# GCP Lateral Movement — Bucket Analysis
# Date: 2026-09-04

## cfu-main.appspot.com Analysis

### Content Categories

| Category | Files | Notes |
|----------|-------|-------|
| Image Product | ~838,939 | Product images |
| CCP-fisik | ~8,465 | Physical CCP documents |
| SIPP-Document | ~833 | HR documents (CV, KTP, NPWP, etc.) |
| alpro-backup | ~332 | POS backup files |
| backup-firebase | ~14,062 | Firebase exports |
| complain-outlet | ~29,747 | Customer complaints |
| doc-sp-owner | ~813,380 | SP owner documents |
| doc-spk-apotekonline | ~375,718 | SPK documents |
| dokumen-sttk | ~576 | Stock documents |
| dokumenrs | ~4,747 | RS documents (KTP, NPWP) |
| label-alodok | ~370,366 | Shipping labels |
| logo-aplikasi | 8 | App logos |
| mutasi | ~198,850 | Bank mutations |
| outlet-document | ~19,771 | Outlet documents |
| outlet-licenses | ~198,484 | Outlet licenses |
| po-file-printed | ~188,645 | PO files |
| prescription-alodok | ~97,363 | Prescriptions |

### Compute Artifacts: NONE FOUND

| Type | Found | Notes |
|------|-------|-------|
| Startup scripts | ❌ | None |
| VM images | ❌ | None |
| Deployment configs | ❌ | None |
| Dockerfiles | ❌ | None |
| Cloud Build configs | ❌ | None |

### Interesting Files (non-image)

| File | Type | Notes |
|------|------|-------|
| admin-ecommerce__Template_Batas_Bawah_Harga_Pelapak_150_protected.xlsx | Excel | E-commerce template |
| admin-ecommerce__Template_Batas_Bawah_Harga_Pelapak_300_protected.xlsx | Excel | E-commerce template |
| TTD_PRESDIR | Directory | Unknown |

## Conclusion

**cfu-main.appspot.com = CDN/static content bucket**

- No compute artifacts
- No deployment configs
- No infrastructure code
- Only static files (images, PDFs, documents)

**Lateral movement via GCS → Compute: NOT VIABLE**

## Other Buckets to Check

| Bucket | Status |
|--------|--------|
| cfu-main-sql-migrate | ✅ Checked (SQL dumps) |
| cfu-main-blackhole-backup | ✅ Checked (farm data) |
| cfu-main-pos-offline | ✅ Checked (POS DB) |
| innopharm-main-development | ⚠️ Partial (IoT/HPLC) |
| virtue-panakea.firebasestorage.app | ⚠️ Partial (healthcare) |

## Next Steps

1. **innopharm-main-development** — check for IoT/HPLC compute configs
2. **virtue-panakea.firebasestorage.app** — check for healthcare app configs
3. **Discord phish** — Jenkins creds
4. **Negotiation** — leverage with current data