> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/zh/cms/duplicati-cms-exploitation.md). # Duplicati 用于本地配置提取、SQLite 密钥、登录认证绕过、备份目标滥用和敏感文件恢复的 Duplicati 利用笔记。


	登录认证绕过	用于 SQLite 配置提取、服务器口令恢复、nonce 密码计算、Burp 拦截和登录绕过的 Duplicati 认证绕过笔记。	/pages/00cbbda682c13439c24ec1f8923436603c91a9ae
	读取备份文件	用于备份目标控制、主机挂载源目录、敏感文件还原、SSH 密钥恢复和数据外泄的 Duplicati 备份滥用笔记。	/pages/e9d23e6586dabac9c011e1d58764f2a3410f3119

--- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://hacking-notes.jord4n.pro/zh/cms/duplicati-cms-exploitation.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.

:floppy-disk:

登录认证绕过

:floppy-disk:

读取备份文件