# SILK SUCOFINDO — Evidence Screenshots
Target: https://silk.sucofindo.co.id (35.219.52.208)
Tanggal capture: 2026-08-26
Mode: READ-ONLY (tanpa input, tanpa upload, tanpa eksekusi)

## Struktur
- `01-login/` — Halaman login + maintenance (F31, F32)
- `02-sqli/` — SQLi endpoint (F01, F02, F26, F27)
- `03-admin-pages/` — 20 halaman admin render tanpa auth (F04)
- `04-source-disclosure/` — Source code bocor (F07, F33-F35, F40, F41)
- `05-compromised/` — RPJITU malware + auto-prepend loader (F37, F38)
- `06-recon-roles/` — Dashboard 4 user simulasi cirebon setelah login (recon)
- `07-upload-endpoint/` — Form upload terkonfirmasi (F16, F24)
- `08-dev-browser/` — Subdomain SILK-test + app di IP sama (eminerba, ensia, operationstkdn)

## Catatan
- Semua halaman admin di `03-admin-pages/` dirender TANPA cookie/session (bukti F04: 108 halaman tanpa auth)
- Source disclosure di `04-source-disclosure/` = screenshot source code (raw PHP tidak bisa dirender chromium, jadi dibungkus HTML wrapper)
- Home roles di `06-recon-roles/` = screenshot dashboard setelah login pakai kredensial simulasi (crb1), read-only