This color is the command
This color can be ignored
This color is the information
Example code
Listing of the contents of a backup nr:1 :
c:\Program Files\Burp\bin\burp.exe -b1 -d “C:”
2017-06-29 16:15:17: c:\Program Files\Burp\bin\burp.exe[2560] auth ok
2017-06-29 16:15:17: c:\Program Files\Burp\bin\burp.exe[2560] Server version: 2.
1.6
2017-06-29 16:15:17: c:\Program Files\Burp\bin\burp.exe[2560] nocsr ok
2017-06-29 16:15:17: c:\Program Files\Burp\bin\burp.exe[2560] SSL is using ciphe
r: DHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=DH Au=RSA Enc=AESGCM(256) Mac=AEA
D
2017-06-29 16:15:18: c:\Program Files\Burp\bin\burp.exe[2560] extra_comms_begin
ok:autoupgrade:incexc:orig_client:uname:counters_json:msg:csetproto:
2017-06-29 16:15:18: c:\Program Files\Burp\bin\burp.exe[2560] Server has protoco
l=0 (auto)
2017-06-29 16:15:18: c:\Program Files\Burp\bin\burp.exe[2560] Using protocol=1
Backup: 0000001 2017-05-30 21:12:40 (deletable)
Listing directory: C:
Users
2017-06-29 16:15:18: c:\Program Files\Burp\bin\burp.exe[2560] main socket: Peer
closed SSL session
2017-06-29 16:15:18: c:\Program Files\Burp\bin\burp.exe[2560] List finished ok
————————————————–
c:\Program Files\Burp\bin\burp.exe -b1 -d “C:/Users”
2017-06-29 20:11:25: c:\Program Files\Burp\bin\burp.exe[4572] auth ok
2017-06-29 20:11:25: c:\Program Files\Burp\bin\burp.exe[4572] Server version: 2.1.6
2017-06-29 20:11:25: c:\Program Files\Burp\bin\burp.exe[4572] nocsr ok
2017-06-29 20:11:25: c:\Program Files\Burp\bin\burp.exe[4572] SSL is using cipher: DHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=DH Au=RSA Enc=AESGCM(256) Mac=AEAD
2017-06-29 20:11:25: c:\Program Files\Burp\bin\burp.exe[4572] extra_comms_beginok:autoupgrade:incexc:orig_client:uname:counters_json:msg:csetproto:
2017-06-29 20:11:25: c:\Program Files\Burp\bin\burp.exe[4572] Server has protocol=0 (auto)
2017-06-29 20:11:25: c:\Program Files\Burp\bin\burp.exe[4572] Using protocol=1
Backup: 0000001 2017-05-30 21:12:40 (deletable)
Listing directory: C:/Users
.
Administrator
All Users
Default
Default User
Public
desktop.ini
2017-06-29 20:11:26: c:\Program Files\Burp\bin\burp.exe[4572] main socket: Peer closed SSL session
2017-06-29 20:11:26: c:\Program Files\Burp\bin\burp.exe[4572] List finished ok
————————————————–
c:\Program Files\Burp\bin\burp.exe -b1 -d “C:/Users/Administrator”
2017-06-29 20:15:41: c:\Program Files\Burp\bin\burp.exe[3100] auth ok
2017-06-29 20:15:41: c:\Program Files\Burp\bin\burp.exe[3100] Server version: 2.1.6
2017-06-29 20:15:41: c:\Program Files\Burp\bin\burp.exe[3100] nocsr ok
2017-06-29 20:15:41: c:\Program Files\Burp\bin\burp.exe[3100] SSL is using cipher: DHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=DH Au=RSA Enc=AESGCM(256) Mac=AEAD
2017-06-29 20:15:41: c:\Program Files\Burp\bin\burp.exe[3100] extra_comms_beginok:autoupgrade:incexc:orig_client:uname:counters_json:msg:csetproto:
2017-06-29 20:15:41: c:\Program Files\Burp\bin\burp.exe[3100] Server has protocol=0 (auto)
2017-06-29 20:15:41: c:\Program Files\Burp\bin\burp.exe[3100] Using protocol=1
Backup: 0000001 2017-05-30 21:12:40 (deletable)
Listing directory: C:/Users/Administrator
.
.rnd
AppData
Application Data
Contacts
Cookies
Desktop
Documents
Downloads
Favorites
Links
Local Settings
Music
My Documents
NTUSER.DAT
NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001
.regtrans-ms
NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002
.regtrans-ms
NetHood
Pictures
PrintHood
Recent
Saved Games
Searches
SendTo
Start Menu
Templates
Videos
ntuser.dat.LOG1
ntuser.dat.LOG2
ntuser.ini
2017-06-29 20:15:41: c:\Program Files\Burp\bin\burp.exe[3100] main socket: Peerclosed SSL session
2017-06-29 20:15:41: c:\Program Files\Burp\bin\burp.exe[3100] List finished ok