Hello,
I am trying to read log files, for a sherlock on HackTheBox. Same problem as this user Util-linux doesn't have utmpdump
How am I supposed to read these log files ? when utmpdump, is not available. Using things like “who” or “strings” will not parse everything the right way, obviously. Why has this been removed?
I hope someone can help me.
Kind regards.
Alright, for any future reader I fixed this myself.
this is how you do it:
Download the binary here GitHub - neko-neko/utmpdump: utmp file dumper, written in golang. Output to json or tsv or csv.
on linux just download the following release from that git page: utmpdump_linux_amd64
then rename it to utmpdump, place it into /usr/bin. Restart your terminal and you can run it from the terminal
utmpdump -f utmp
Try this : >>
You can also try this : >>
sudo apt install utmpdump
That didn’t work, I had to download the binary separate and put it in my /usr/bin manually.
try
sudo apt install util-linux
if its not installed try find it with comant which utmpdump should return /usr/bin/utmpdump
if not then install it from git hub
git clone https://github.com/util-linux/util-linux.git cd util-linux
hope you wil find this helpful
I’m not a Kali user myself but in my opinion it would be sensible for Kali Linux to fork the util-linux package to resume building the utmpdump (and last, but renamed) commands as these are surely sensible tools to have available to interrogate system files. It is only by package configuration that these are no longer built - they will build and run fine otherwise. Also note you can build these same tools from the sysvinit source package as well: Add sysvinit-utmp-utils package (!14) · Merge requests · Debian / sysvinit · GitLab