_raw:
[20260110-09:06:59] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.102 port 59725
[20260110-09:06:59] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260110-09:06:59] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260110-09:06:59] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260110-09:06:59] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260110-09:06:59] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260110-09:06:59] [ERROR] libxrdp_force_read: header read error
[20260110-09:06:59] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260110-09:06:59] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260110-09:06:59] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260110-09:06:59] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260110-09:06:59] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260110-09:06:59] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260110-09:06:59] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260110-09:07:00] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.102 port 59726
[20260110-09:07:00] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260110-09:07:00] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260110-09:07:00] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260110-09:07:00] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260110-09:07:00] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260110-09:07:00] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260110-09:07:00] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260110-09:07:00] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260110-09:07:00] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260110-09:07:00] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260110-09:07:00] [INFO ] Non-TLS connection established from ::ffff:10.0.254.102 port 59726: with security level : high
[20260110-09:07:00] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260110-09:07:00] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260110-09:07:00] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260110-09:07:00] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260110-09:07:00] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260110-09:07:00] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260110-09:07:00] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw:
[20260110-09:06:58] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260110-09:06:58] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260110-09:06:58] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260110-09:06:58] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260110-09:06:58] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260110-09:06:58] [ERROR] libxrdp_force_read: header read error
[20260110-09:06:58] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260110-09:06:58] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260110-09:06:58] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260110-09:06:58] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260110-09:06:58] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260110-09:06:58] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260110-09:06:58] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.105 port 64311
[20260110-09:06:58] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260110-09:06:58] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260110-09:06:58] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260110-09:06:58] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260110-09:06:58] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260110-09:06:58] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260110-09:06:58] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260110-09:06:58] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260110-09:06:58] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260110-09:06:58] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260110-09:06:58] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260110-09:06:58] [INFO ] Non-TLS connection established from ::ffff:10.0.254.105 port 64311: with security level : high
[20260110-09:06:58] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260110-09:06:58] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260110-09:06:58] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260110-09:06:58] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260110-09:06:58] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260110-09:06:58] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260110-09:06:58] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: [20260110-09:06:57] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.105 port 64310


_raw:
[20260110-09:06:55] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260110-09:06:55] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260110-09:06:55] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260110-09:06:55] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260110-09:06:55] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260110-09:06:55] [ERROR] libxrdp_force_read: header read error
[20260110-09:06:55] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260110-09:06:55] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260110-09:06:55] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260110-09:06:55] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260110-09:06:55] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260110-09:06:55] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260110-09:06:55] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260110-09:06:56] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.103 port 60260
[20260110-09:06:56] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260110-09:06:56] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260110-09:06:56] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260110-09:06:56] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260110-09:06:56] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260110-09:06:56] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260110-09:06:56] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260110-09:06:56] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260110-09:06:56] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260110-09:06:56] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260110-09:06:56] [INFO ] Non-TLS connection established from ::ffff:10.0.254.103 port 60260: with security level : high
[20260110-09:06:56] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260110-09:06:56] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260110-09:06:56] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260110-09:06:56] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260110-09:06:56] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260110-09:06:56] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260110-09:06:56] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: [20260110-09:06:55] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.103 port 60259


_raw:
[20260110-09:06:55] [INFO ] Terminating X server (pid 229316) on display 10
[20260110-09:06:55] [INFO ] Terminating the xrdp channel server (pid 229345) on display 10
[20260110-09:06:55] [INFO ] X server on display 10 (pid 229316) returned exit code 0 and signal number 0
[20260110-09:06:55] [INFO ] xrdp channel server for display 10 (pid 229345) exit code 0 and signal number 0
[20260110-09:06:55] [INFO ] cleanup_sockets:
[20260110-09:06:55] [INFO ] Process 229288 has exited
[20260110-09:06:55] [INFO ] ++ terminated session:  username pentester, display :10.0, session_pid 229288, ip ::ffff:10.0.254.102:57981 - socket: 12


_raw: [20260110-09:06:55] [INFO ] Calling auth_stop_session and auth_end from pid 229288


_raw:
[20260110-09:06:53] [ERROR] pam_authenticate failed: Authentication failure
[20260110-09:06:53] [INFO ] AUTHFAIL: user=pentester ip=::ffff:10.0.254.105 time=1768054013
[20260110-09:06:53] [ERROR] sesman_data_in: scp_process_msg failed
[20260110-09:06:53] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans


_raw:
[20260110-09:06:52] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260110-09:06:52] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260110-09:06:52] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260110-09:06:52] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260110-09:06:52] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260110-09:06:52] [ERROR] libxrdp_force_read: header read error
[20260110-09:06:52] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260110-09:06:52] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260110-09:06:52] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260110-09:06:52] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260110-09:06:52] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260110-09:06:52] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260110-09:06:52] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260110-09:06:52] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.105 port 60384
[20260110-09:06:52] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260110-09:06:52] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260110-09:06:52] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260110-09:06:52] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260110-09:06:52] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260110-09:06:52] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260110-09:06:52] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260110-09:06:52] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260110-09:06:52] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260110-09:06:52] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260110-09:06:53] [INFO ] Non-TLS connection established from ::ffff:10.0.254.105 port 60384: with security level : high
[20260110-09:06:53] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260110-09:06:53] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260110-09:06:53] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260110-09:06:53] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260110-09:06:53] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260110-09:06:53] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260110-09:06:53] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: [20260110-09:06:52] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.105 port 60383


_raw:
[20260110-09:06:51] [INFO ] Terminating X server (pid 229471) on display 10
[20260110-09:06:51] [INFO ] Terminating the xrdp channel server (pid 229500) on display 10
[20260110-09:06:51] [INFO ] X server on display 10 (pid 229471) returned exit code 0 and signal number 0
[20260110-09:06:51] [INFO ] xrdp channel server for display 10 (pid 229500) exit code 0 and signal number 0
[20260110-09:06:51] [INFO ] cleanup_sockets:
[20260110-09:06:51] [INFO ] Process 229443 has exited
[20260110-09:06:51] [INFO ] ++ terminated session:  username pentester, display :10.0, session_pid 229443, ip ::ffff:10.0.254.103:58198 - socket: 12


_raw: [20260110-09:06:51] [INFO ] Calling auth_stop_session and auth_end from pid 229443


_raw:
[20260110-09:06:51] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260110-09:06:51] [INFO ] sesman connect ok
[20260110-09:06:51] [INFO ] sending login info to session manager. Please wait...
[20260110-09:06:53] [INFO ] xrdp_wm_log_msg: login failed for user pentester
[20260110-09:06:53] [INFO ] login failed for user pentester


_raw: [20260110-09:06:51] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 55330


_raw: 2026-01-10 09:06:45.677 EST [250635] LOG:  checkpoint complete: wrote 6 buffers (0.0%), wrote 1 SLRU buffers; 0 WAL file(s) added, 0 removed, 0 recycled; write=0.684 s, sync=0.005 s, total=0.715 s; sync files=5, longest=0.003 s, average=0.001 s; distance=45 kB, estimate=45 kB; lsn=0/2413C80, redo lsn=0/2413C28


_raw: [20260110-09:06:44] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49


_raw:
[20260110-09:06:44] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260110-09:06:44] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260110-09:06:44] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260110-09:06:44] [WARN ] xrdp_caps_process_codecs: unknown codec id 5


_raw:
[20260110-09:06:26] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260110-09:06:26] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260110-09:06:26] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260110-09:06:26] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260110-09:06:26] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260110-09:06:27] [ERROR] libxrdp_force_read: header read error
[20260110-09:06:27] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260110-09:06:27] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260110-09:06:27] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260110-09:06:27] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260110-09:06:27] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260110-09:06:27] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260110-09:06:27] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260110-09:06:29] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.102 port 64764
[20260110-09:06:29] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260110-09:06:29] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260110-09:06:29] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260110-09:06:29] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260110-09:06:29] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260110-09:06:29] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260110-09:06:29] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260110-09:06:29] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260110-09:06:29] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260110-09:06:29] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260110-09:06:29] [INFO ] Non-TLS connection established from ::ffff:10.0.254.102 port 64764: with security level : high
[20260110-09:06:29] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260110-09:06:29] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260110-09:06:29] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260110-09:06:29] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260110-09:06:29] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260110-09:06:29] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260110-09:06:29] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: [20260110-09:06:26] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.102 port 64761


_raw:
[20260110-09:06:23] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.105 port 59751
[20260110-09:06:23] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260110-09:06:23] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260110-09:06:23] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260110-09:06:23] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260110-09:06:23] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260110-09:06:23] [ERROR] libxrdp_force_read: header read error
[20260110-09:06:23] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260110-09:06:23] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260110-09:06:23] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260110-09:06:23] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260110-09:06:23] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260110-09:06:23] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260110-09:06:23] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260110-09:06:24] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.105 port 59752
[20260110-09:06:24] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260110-09:06:24] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260110-09:06:24] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260110-09:06:24] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260110-09:06:24] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260110-09:06:24] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260110-09:06:24] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260110-09:06:24] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260110-09:06:24] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260110-09:06:24] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260110-09:06:24] [INFO ] Non-TLS connection established from ::ffff:10.0.254.105 port 59752: with security level : high
[20260110-09:06:24] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260110-09:06:24] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260110-09:06:24] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260110-09:06:24] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260110-09:06:24] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260110-09:06:24] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260110-09:06:24] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw:
[20260110-09:06:03] [INFO ] ++ reconnected session: username pentester, display :10.0, session_pid 228110, ip ::ffff:10.0.254.105:59846 - socket: 12
[20260110-09:06:03] [ERROR] sesman_data_in: scp_process_msg failed
[20260110-09:06:03] [INFO ] Starting session reconnection script on display 10: /etc/xrdp/reconnectwm.sh
[20260110-09:06:03] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260110-09:06:03] [INFO ] Process 1032679 has exited


_raw:
[20260110-09:06:03] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260110-09:06:03] [INFO ] sesman connect ok
[20260110-09:06:03] [INFO ] sending login info to session manager. Please wait...
[20260110-09:06:03] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260110-09:06:03] [INFO ] login successful for user pentester on display 10
[20260110-09:06:03] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260110-09:06:03] [INFO ] started connecting
[20260110-09:06:03] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260110-09:06:03] [INFO ] lib_mod_log_peer: xrdp_pid=1031772 connected to X11rdp_pid=228138 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.105 client_port=59846
[20260110-09:06:03] [INFO ] connected ok


_raw: [20260110-09:06:03] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 38914


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:06:00.983: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:971): Gtk-WARNING **: 09:06:00.963: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:969): Gtk-WARNING **: 09:06:00.956: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1158): Gtk-WARNING **: 09:06:00.941: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:06:00.938: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:946): Gtk-WARNING **: 09:06:00.920: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:944): Gtk-WARNING **: 09:06:00.914: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:944): Gtk-WARNING **: 09:06:00.877: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:06:00.876: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1153): Gtk-WARNING **: 09:06:00.852: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:06:00.845: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:06:00.844: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1319): Gtk-WARNING **: 09:06:00.794: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:961): Gtk-WARNING **: 09:06:00.765: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:06:00.760: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:06:00.736: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:06:00.714: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:06:00.697: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:934): Gtk-WARNING **: 09:06:00.689: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:941): Gtk-WARNING **: 09:06:00.688: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:06:00.667: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:948): Gtk-WARNING **: 09:06:00.645: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:933): Gtk-WARNING **: 09:06:00.627: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:938): Gtk-WARNING **: 09:06:00.625: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:06:00.625: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:928): Gtk-WARNING **: 09:06:00.619: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:06:00.610: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:06:00.601: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:945): Gtk-WARNING **: 09:06:00.596: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1165): Gtk-WARNING **: 09:06:00.578: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:06:00.565: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:961): Gtk-WARNING **: 09:06:00.546: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:944): Gtk-WARNING **: 09:06:00.540: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:06:00.531: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:06:00.520: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:06:00.518: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:946): Gtk-WARNING **: 09:06:00.512: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:932): Gtk-WARNING **: 09:06:00.475: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:06:00.463: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:06:00.460: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1044): Gtk-WARNING **: 09:06:00.447: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:06:00.426: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1151): Gtk-WARNING **: 09:06:00.400: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:06:00.393: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:06:00.374: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:06:00.340: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:06:00.305: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:946): Gtk-WARNING **: 09:06:00.304: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:968): Gtk-WARNING **: 09:06:00.280: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:952): Gtk-WARNING **: 09:06:00.270: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:944): Gtk-WARNING **: 09:06:00.245: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:938): Gtk-WARNING **: 09:06:00.241: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:06:00.230: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:06:00.226: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:06:00.224: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:06:00.216: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1149): Gtk-WARNING **: 09:06:00.216: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:06:00.202: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:948): Gtk-WARNING **: 09:06:00.151: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:06:00.144: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:06:00.143: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:06:00.134: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:941): Gtk-WARNING **: 09:06:00.134: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:959): Gtk-WARNING **: 09:06:00.094: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:06:00.094: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:06:00.092: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:934): Gtk-WARNING **: 09:06:00.071: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:06:00.061: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:06:00.045: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:938): Gtk-WARNING **: 09:06:00.042: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:06:00.031: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:06:00.030: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:06:00.023: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:949): Gtk-WARNING **: 09:06:00.012: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw:
[20260110-09:05:47] [INFO ] Terminating X server (pid 229285) on display 10
[20260110-09:05:47] [INFO ] Terminating the xrdp channel server (pid 229315) on display 10
[20260110-09:05:47] [INFO ] X server on display 10 (pid 229285) returned exit code 0 and signal number 0
[20260110-09:05:47] [INFO ] xrdp channel server for display 10 (pid 229315) exit code 0 and signal number 0
[20260110-09:05:47] [INFO ] cleanup_sockets:
[20260110-09:05:47] [INFO ] Process 229258 has exited
[20260110-09:05:47] [INFO ] ++ terminated session:  username pentester, display :10.0, session_pid 229258, ip ::ffff:10.0.254.105:58299 - socket: 12


_raw: [20260110-09:05:47] [INFO ] Calling auth_stop_session and auth_end from pid 229258


_raw:
[20260110-09:05:42] [ERROR] pam_authenticate failed: Authentication failure
[20260110-09:05:42] [INFO ] AUTHFAIL: user=pentester ip=::ffff:10.0.254.105 time=1768053942
[20260110-09:05:42] [ERROR] sesman_data_in: scp_process_msg failed
[20260110-09:05:42] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans


_raw:
[20260110-09:05:41] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260110-09:05:41] [INFO ] sesman connect ok
[20260110-09:05:41] [INFO ] sending login info to session manager. Please wait...
[20260110-09:05:42] [INFO ] xrdp_wm_log_msg: login failed for user pentester
[20260110-09:05:42] [INFO ] login failed for user pentester


_raw: [20260110-09:05:41] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 37158


_raw:
[20260110-09:05:22] [INFO ] ++ reconnected session: username pentester, display :10.0, session_pid 228405, ip ::ffff:10.0.254.103:60038 - socket: 12
[20260110-09:05:22] [ERROR] sesman_data_in: scp_process_msg failed
[20260110-09:05:22] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260110-09:05:22] [INFO ] Starting session reconnection script on display 10: /etc/xrdp/reconnectwm.sh
[20260110-09:05:22] [INFO ] Process 998988 has exited


_raw:
[20260110-09:05:22] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260110-09:05:22] [INFO ] sesman connect ok
[20260110-09:05:22] [INFO ] sending login info to session manager. Please wait...
[20260110-09:05:22] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260110-09:05:22] [INFO ] login successful for user pentester on display 10
[20260110-09:05:22] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260110-09:05:22] [INFO ] started connecting
[20260110-09:05:22] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260110-09:05:22] [INFO ] lib_mod_log_peer: xrdp_pid=998269 connected to X11rdp_pid=228433 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.103 client_port=60038
[20260110-09:05:22] [INFO ] connected ok


_raw: [20260110-09:05:22] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 55294


_raw:
[20260110-09:05:13] [INFO ] ++ reconnected session: username pentester, display :10.0, session_pid 228382, ip ::ffff:10.0.254.101:53126 - socket: 12
[20260110-09:05:13] [ERROR] sesman_data_in: scp_process_msg failed
[20260110-09:05:13] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260110-09:05:13] [INFO ] Starting session reconnection script on display 10: /etc/xrdp/reconnectwm.sh
[20260110-09:05:13] [INFO ] Process 975646 has exited


_raw:
[20260110-09:05:13] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260110-09:05:13] [INFO ] sesman connect ok
[20260110-09:05:13] [INFO ] sending login info to session manager. Please wait...
[20260110-09:05:13] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260110-09:05:13] [INFO ] login successful for user pentester on display 10
[20260110-09:05:13] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260110-09:05:13] [INFO ] started connecting
[20260110-09:05:13] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260110-09:05:13] [INFO ] lib_mod_log_peer: xrdp_pid=974948 connected to X11rdp_pid=228410 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.101 client_port=53126
[20260110-09:05:13] [INFO ] connected ok


_raw: [20260110-09:05:13] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 56266


_raw:
[20260110-09:05:09] [INFO ] ++ reconnected session: username pentester, display :10.0, session_pid 229862, ip ::ffff:10.0.254.104:59892 - socket: 12
[20260110-09:05:09] [ERROR] sesman_data_in: scp_process_msg failed
[20260110-09:05:09] [INFO ] Starting session reconnection script on display 10: /etc/xrdp/reconnectwm.sh
[20260110-09:05:09] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260110-09:05:09] [INFO ] Process 1058977 has exited


_raw:
[20260110-09:05:09] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260110-09:05:09] [INFO ] sesman connect ok
[20260110-09:05:09] [INFO ] sending login info to session manager. Please wait...
[20260110-09:05:09] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260110-09:05:09] [INFO ] login successful for user pentester on display 10
[20260110-09:05:09] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260110-09:05:09] [INFO ] started connecting
[20260110-09:05:09] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260110-09:05:09] [INFO ] lib_mod_log_peer: xrdp_pid=1057785 connected to X11rdp_pid=229890 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.104 client_port=59892
[20260110-09:05:09] [INFO ] connected ok


_raw: [20260110-09:05:09] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 39292


_raw:
[+0.00s] DEBUG: Logging to /var/log/lightdm/lightdm.log
[+0.00s] DEBUG: Starting Light Display Manager 1.32.0, UID=0 PID=834
[+0.00s] DEBUG: Loading configuration dirs from /usr/share/lightdm/lightdm.conf.d
[+0.00s] DEBUG: Loading configuration from /usr/share/lightdm/lightdm.conf.d/01_debian.conf
[+0.00s] DEBUG: Loading configuration dirs from /usr/local/share/lightdm/lightdm.conf.d
[+0.00s] DEBUG: Loading configuration dirs from /etc/xdg/lightdm/lightdm.conf.d
[+0.00s] DEBUG: Loading configuration from /etc/lightdm/lightdm.conf.d/01_kali.conf
[+0.00s] DEBUG: Loading configuration from /etc/lightdm/lightdm.conf
[+0.00s] DEBUG: Registered seat module local
[+0.00s] DEBUG: Registered seat module xremote
[+0.00s] DEBUG: Using D-Bus name org.freedesktop.DisplayManager
[+0.01s] DEBUG: _g_io_module_get_default: Found default implementation local (GLocalVfs) for ‘gio-vfs’
[+0.01s] DEBUG: Monitoring logind for seats
[+0.01s] DEBUG: New seat added from logind: seat0
[+0.01s] DEBUG: Seat seat0: Loading properties from config section Seat:*
[+0.01s] DEBUG: Seat seat0 has property CanMultiSession=no
[+0.01s] DEBUG: Seat seat0: Starting
[+0.01s] DEBUG: Seat seat0: Creating user session
[+0.01s] DEBUG: Loading users from org.freedesktop.Accounts
[+0.01s] DEBUG: User /org/freedesktop/Accounts/User1001 added
[+0.06s] DEBUG: Seat seat0: Can't login unknown user 'cyberrange'
[+0.06s] DEBUG: Seat seat0: Creating greeter session
[+0.07s] DEBUG: Seat seat0: Creating display server of type x
[+0.07s] DEBUG: Seat seat0: Plymouth is running on VT 1, but this is less than the configured minimum of 7 so not replacing it
[+0.07s] DEBUG: Quitting Plymouth
[+0.10s] DEBUG: Using VT 7
[+0.10s] DEBUG: Seat seat0: Starting local X display on VT 7
[+0.10s] DEBUG: XServer 0: Logging to /var/log/lightdm/x-0.log
[+0.10s] DEBUG: XServer 0: Writing X server authority to /var/run/lightdm/root/:0
[+0.10s] DEBUG: XServer 0: Launching X Server
[+0.10s] DEBUG: Launching process 874: /usr/bin/X :0 -seat seat0 -auth /var/run/lightdm/root/:0 -nolisten tcp vt7 -novtswitch
[+0.10s] DEBUG: XServer 0: Waiting for ready signal from X server :0
[+0.10s] DEBUG: Acquired bus name org.freedesktop.DisplayManager
[+0.10s] DEBUG: Registering seat with bus path /org/freedesktop/DisplayManager/Seat0
[+1.11s] DEBUG: Got signal 10 from process 874
[+1.11s] DEBUG: XServer 0: Got signal from X server :0
[+1.11s] DEBUG: XServer 0: Connecting to XServer :0
[+1.11s] DEBUG: Seat seat0: Display server ready, starting session authentication
[+1.11s] DEBUG: Session pid=930: Started with service 'lightdm-greeter', username 'lightdm'
[+1.13s] DEBUG: Session pid=930: Authentication complete with return value 0: Success
[+1.13s] DEBUG: Seat seat0: Session authenticated, running command
[+1.13s] DEBUG: Session pid=930: Running command /usr/sbin/lightdm-gtk-greeter
[+1.13s] DEBUG: Creating shared data directory /var/lib/lightdm/data/lightdm
[+1.13s] DEBUG: Session pid=930: Logging to /var/log/lightdm/seat0-greeter.log
[+1.48s] DEBUG: Activating VT 7
[+1.48s] DEBUG: Activating login1 session c1
[+1.48s] DEBUG: Seat seat0 changes active session to c1
[+1.48s] DEBUG: Session c1 is already active
[+1.48s] DEBUG: Seat seat0 changes active session to c1
[+1.48s] DEBUG: Session c1 is already active
[+1.79s] DEBUG: Greeter connected version=1.32.0 api=1 resettable=false
[+2.12s] DEBUG: Greeter start authentication
[+2.13s] DEBUG: Session pid=1057: Started with service 'lightdm', username '(null)'
[+2.13s] DEBUG: Session pid=1057: Got 1 message(s) from PAM
[+2.13s] DEBUG: Prompt greeter with 1 message(s)


_raw: Cloud-init v. 25.3 finished at Sat, 10 Jan 2026 14:05:09 +0000. Datasource DataSourceConfigDrive [net,ver=2][source=/dev/sr0].  Up 14.72 seconds

_sourcetype: cloud-init-output

sourcetype: cloud-init-output


_raw: Cloud-init v. 25.3 running 'modules:final' at Sat, 10 Jan 2026 14:05:09 +0000. Up 14.68 seconds.


_raw:
[    12.932]
X.Org X Server 1.21.1.20
X Protocol Version 11, Revision 0
[    12.932] Current Operating System: Linux cptc11-finals-t1-vdi-kali05 6.16.8+kali-amd64 #1 SMP PREEMPT_DYNAMIC Kali 6.16.8-1kali1 (2025-09-24) x86_64
[    12.932] Kernel command line: BOOT_IMAGE=/boot/vmlinuz-6.16.8+kali-amd64 root=UUID=2ef6b202-63a6-479b-b1f6-9f51d7da0435 ro quiet splash

_sourcetype: Xorg

sourcetype: Xorg


_raw:
(==) Log file: "/var/log/Xorg.0.log", Time: Sat Jan 10 09:05:07 2026
(==) Using system config directory "/usr/share/X11/xorg.conf.d"
pci id for fd 16: 1234:1111, driver (null)
pci id for fd 17: 1234:1111, driver (null)
pci id for fd 18: 1234:1111, driver (null)
pci id for fd 17: 1234:1111, driver (null)
pci id for fd 18: 1234:1111, driver (null)


_raw:
X.Org X Server 1.21.1.20
X Protocol Version 11, Revision 0
Current Operating System: Linux cptc11-finals-t1-vdi-kali05 6.16.8+kali-amd64 #1 SMP PREEMPT_DYNAMIC Kali 6.16.8-1kali1 (2025-09-24) x86_64
Kernel command line: BOOT_IMAGE=/boot/vmlinuz-6.16.8+kali-amd64 root=UUID=2ef6b202-63a6-479b-b1f6-9f51d7da0435 ro quiet splash


_raw: [   12.871400] cloud-init[510]: Cloud-init v. 25.3 running 'modules:config' at Sat, 10 Jan 2026 14:05:07 +0000. Up 12.85 seconds.


_raw:
[    13.852] (II) libinput: VirtualPS/2 VMware VMMouse: Step value 0 was provided, libinput Fallback acceleration function is used.
[    13.852] (**) Option "config_info" "udev:/sys/devices/platform/i8042/serio1/input/input3/event3"
[    13.852] (II) XINPUT: Adding extended input device "VirtualPS/2 VMware VMMouse" (type: MOUSE, id 10)
[    13.852] (**) Option "AccelerationScheme" "none"
[    13.852] (**) VirtualPS/2 VMware VMMouse: (accel) selected scheme none/0
[    13.852] (**) VirtualPS/2 VMware VMMouse: (accel) acceleration factor: 2.000
[    13.852] (**) VirtualPS/2 VMware VMMouse: (accel) acceleration threshold: 4
[    13.853] (II) event3  - VirtualPS/2 VMware VMMouse: is tagged by udev as: Mouse
[    13.853] (II) event3  - VirtualPS/2 VMware VMMouse: device is a pointer
[    13.854] (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/mouse1)
[    13.854] (II) No input driver specified, ignoring this device.
[    13.854] (II) This device may have been added with another device file.
[    13.855] (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/event2)
[    13.855] (**) VirtualPS/2 VMware VMMouse: Applying InputClass "libinput pointer catchall"
[    13.855] (II) Using input driver 'libinput' for 'VirtualPS/2 VMware VMMouse'
[    13.855] (**) VirtualPS/2 VMware VMMouse: always reports core events
[    13.855] (**) Option "Device" "/dev/input/event2"
[    13.856] (II) event2  - VirtualPS/2 VMware VMMouse: is tagged by udev as: Mouse
[    13.856] (II) event2  - VirtualPS/2 VMware VMMouse: device is a pointer
[    13.856] (II) event2  - VirtualPS/2 VMware VMMouse: device removed
[    13.900] (**) Option "config_info" "udev:/sys/devices/platform/i8042/serio1/input/input4/event2"
[    13.900] (II) XINPUT: Adding extended input device "VirtualPS/2 VMware VMMouse" (type: MOUSE, id 11)
[    13.900] (**) Option "AccelerationScheme" "none"
[    13.900] (**) VirtualPS/2 VMware VMMouse: (accel) selected scheme none/0
[    13.900] (**) VirtualPS/2 VMware VMMouse: (accel) acceleration factor: 2.000
[    13.900] (**) VirtualPS/2 VMware VMMouse: (accel) acceleration threshold: 4
[    13.901] (II) event2  - VirtualPS/2 VMware VMMouse: is tagged by udev as: Mouse
[    13.901] (II) event2  - VirtualPS/2 VMware VMMouse: device is a pointer
[    13.902] (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/mouse0)
[    13.902] (II) No input driver specified, ignoring this device.
[    13.902] (II) This device may have been added with another device file.
[    13.903] (II) config/udev: Adding input device PC Speaker (/dev/input/event6)
[    13.903] (II) No input driver specified, ignoring this device.
[    13.903] (II) This device may have been added with another device file.


_raw:
[    12.932] (==) Log file: "/var/log/Xorg.0.log", Time: Sat Jan 10 09:05:07 2026
[    12.934] (==) Using system config directory "/usr/share/X11/xorg.conf.d"
[    12.936] (==) No Layout section.  Using the first Screen section.
[    12.936] (==) No screen section available. Using defaults.
[    12.936] (**) |-->Screen "Default Screen Section" (0)
[    12.936] (**) |   |-->Monitor "<default monitor>"
[    12.937] (==) No monitor specified for screen "Default Screen Section".
	Using a default monitor configuration.
[    12.937] (**) Allowing byte-swapped clients
[    12.937] (==) Automatically adding devices
[    12.937] (==) Automatically enabling devices
[    12.937] (==) Automatically adding GPU devices
[    12.937] (==) Automatically binding GPU devices
[    12.937] (==) Max clients allowed: 256, resource mask: 0x1fffff
[    12.942] (WW) The directory "/usr/share/fonts/X11/cyrillic" does not exist.
[    12.942] 	Entry deleted from font path.
[    12.946] (==) FontPath set to:
	/usr/share/fonts/X11/misc,
	/usr/share/fonts/X11/100dpi/:unscaled,
	/usr/share/fonts/X11/75dpi/:unscaled,
	/usr/share/fonts/X11/Type1,
	/usr/share/fonts/X11/100dpi,
	/usr/share/fonts/X11/75dpi,
	built-ins
[    12.946] (==) ModulePath set to "/usr/lib/xorg/modules"
[    12.946] (II) The server relies on udev to provide the list of input devices.
	If no devices become available, reconfigure udev or disable AutoAddDevices.
[    12.946] (II) Loader magic: 0x55a276cb3f20
[    12.946] (II) Module ABI versions:
[    12.946] 	X.Org ANSI C Emulation: 0.4
[    12.946] 	X.Org Video Driver: 25.2
[    12.946] 	X.Org XInput driver : 24.4
[    12.946] 	X.Org Server Extension : 10.0
[    12.947] (++) using VT number 7
[    12.947] (II) systemd-logind: logind integration requires -keeptty and -keeptty was not provided, disabling logind integration
[    12.947] (II) xfree86: Adding drm device (/dev/dri/card0)
[    12.947] (II) Platform probe for /sys/devices/pci0000:00/0000:00:02.0/drm/card0
[    12.954] (--) PCI:*(0@0:2:0) 1234:1111:1af4:1100 rev 2, Mem @ 0xfd000000/16777216, 0xfebd0000/4096, BIOS @ 0x????????/131072
[    12.954] (II) LoadModule: "glx"
[    12.957] (II) Loading /usr/lib/xorg/modules/extensions/libglx.so
[    12.966] (II) Module glx: vendor="X.Org Foundation"
[    12.966] 	compiled for 1.21.1.20, module version = 1.0.0
[    12.966] 	ABI class: X.Org Server Extension, version 10.0
[    12.966] (==) Matched modesetting as autoconfigured driver 0
[    12.966] (==) Matched fbdev as autoconfigured driver 1
[    12.966] (==) Matched vesa as autoconfigured driver 2
[    12.966] (==) Assigned the driver to the xf86ConfigLayout
[    12.966] (II) LoadModule: "modesetting"
[    12.967] (II) Loading /usr/lib/xorg/modules/drivers/modesetting_drv.so
[    12.967] (II) Module modesetting: vendor="X.Org Foundation"
[    12.967] 	compiled for 1.21.1.20, module version = 1.21.1
[    12.967] 	Module class: X.Org Video Driver
[    12.967] 	ABI class: X.Org Video Driver, version 25.2
[    12.967] (II) LoadModule: "fbdev"
[    12.967] (II) Loading /usr/lib/xorg/modules/drivers/fbdev_drv.so
[    12.970] (II) Module fbdev: vendor="X.Org Foundation"
[    12.970] 	compiled for 1.21.1.3, module version = 0.5.0
[    12.970] 	Module class: X.Org Video Driver
[    12.970] 	ABI class: X.Org Video Driver, version 25.2
[    12.970] (II) LoadModule: "vesa"
[    12.970] (II) Loading /usr/lib/xorg/modules/drivers/vesa_drv.so
[    12.971] (II) Module vesa: vendor="X.Org Foundation"
[    12.971] 	compiled for 1.21.1.15, module version = 2.6.0
[    12.971] 	Module class: X.Org Video Driver
[    12.971] 	ABI class: X.Org Video Driver, version 25.2
[    12.971] (II) modesetting: Driver for Modesetting Kernel Drivers: kms
[    12.971] (II) FBDEV: driver for framebuffer: fbdev
[    12.971] (II) VESA: driver for VESA chipsets: vesa
[    12.974] (II) modeset(0): using drv /dev/dri/card0
[    12.974] (WW) Falling back to old probe method for fbdev
[    12.974] (II) Loading sub module "fbdevhw"
[    12.974] (II) LoadModule: "fbdevhw"
[    12.974] (II) Loading /usr/lib/xorg/modules/libfbdevhw.so
[    12.974] (II) Module fbdevhw: vendor="X.Org Foundation"
[    12.974] 	compiled for 1.21.1.20, module version = 0.0.2
[    12.974] 	ABI class: X.Org Video Driver, version 25.2
[    12.975] (II) modeset(0): Creating default Display subsection in Screen section
	"Default Screen Section" for depth/fbbpp 24/32
[    12.975] (==) modeset(0): Depth 24, (==) framebuffer bpp 32
[    12.975] (==) modeset(0): RGB weight 888
[    12.975] (==) modeset(0): Default visual is TrueColor
[    12.975] (II) Loading sub module "glamoregl"
[    12.975] (II) LoadModule: "glamoregl"
[    12.975] (II) Loading /usr/lib/xorg/modules/libglamoregl.so
[    12.985] (II) Module glamoregl: vendor="X.Org Foundation"
[    12.985] 	compiled for 1.21.1.20, module version = 1.0.1
[    12.985] 	ABI class: X.Org ANSI C Emulation, version 0.4
[    13.389] (II) modeset(0): glamor: Using OpenGL 4.5 context.
[    13.389] (II) modeset(0): Refusing to try glamor on llvmpipe
[    13.391] (II) modeset(0): glamor initialization failed
[    13.391] (II) modeset(0): ShadowFB: preferred NO, enabled NO
[    13.392] (II) modeset(0): Output Virtual-1 has no monitor section
[    13.393] (II) modeset(0): EDID for output Virtual-1
[    13.393] (II) modeset(0): Printing probed modes for output Virtual-1
[    13.393] (II) modeset(0): Modeline "1024x768"x60.0   65.00  1024 1048 1184 1344  768 771 777 806 -hsync -vsync (48.4 kHz eP)
[    13.393] (II) modeset(0): Modeline "2560x1600"x60.0  348.50  2560 2752 3032 3504  1600 1603 1609 1658 -hsync +vsync (99.5 kHz e)
[    13.393] (II) modeset(0): Modeline "2560x1600"x60.0  268.50  2560 2608 2640 2720  1600 1603 1609 1646 +hsync -vsync (98.7 kHz e)
[    13.393] (II) modeset(0): Modeline "1920x1440"x60.0  234.00  1920 2048 2256 2600  1440 1441 1444 1500 -hsync +vsync (90.0 kHz e)
[    13.393] (II) modeset(0): Modeline "1856x1392"x60.0  218.25  1856 1952 2176 2528  1392 1393 1396 1439 -hsync +vsync (86.3 kHz e)
[    13.393] (II) modeset(0): Modeline "1792x1344"x60.0  204.75  1792 1920 2120 2448  1344 1345 1348 1394 -hsync +vsync (83.6 kHz e)
[    13.393] (II) modeset(0): Modeline "2048x1152"x60.0  162.00  2048 2074 2154 2250  1152 1153 1156 1200 +hsync +vsync (72.0 kHz e)
[    13.393] (II) modeset(0): Modeline "1920x1200"x59.9  193.25  1920 2056 2256 2592  1200 1203 1209 1245 -hsync +vsync (74.6 kHz e)
[    13.393] (II) modeset(0): Modeline "1920x1200"x60.0  154.00  1920 1968 2000 2080  1200 1203 1209 1235 +hsync -vsync (74.0 kHz e)
[    13.393] (II) modeset(0): Modeline "1920x1080"x60.0  148.50  1920 2008 2052 2200  1080 1084 1089 1125 -hsync -vsync (67.5 kHz e)
[    13.393] (II) modeset(0): Modeline "1600x1200"x60.0  162.00  1600 1664 1856 2160  1200 1201 1204 1250 +hsync +vsync (75.0 kHz e)
[    13.393] (II) modeset(0): Modeline "1680x1050"x60.0  146.25  1680 1784 1960 2240  1050 1053 1059 1089 -hsync +vsync (65.3 kHz e)
[    13.393] (II) modeset(0): Modeline "1680x1050"x59.9  119.00  1680 1728 1760 1840  1050 1053 1059 1080 +hsync -vsync (64.7 kHz e)
[    13.393] (II) modeset(0): Modeline "1400x1050"x60.0  121.75  1400 1488 1632 1864  1050 1053 1057 1089 -hsync +vsync (65.3 kHz e)
[    13.393] (II) modeset(0): Modeline "1400x1050"x59.9  101.00  1400 1448 1480 1560  1050 1053 1057 1080 +hsync -vsync (64.7 kHz e)
[    13.393] (II) modeset(0): Modeline "1600x900"x60.0  108.00  1600 1624 1704 1800  900 901 904 1000 +hsync +vsync (60.0 kHz e)
[    13.393] (II) modeset(0): Modeline "1280x1024"x60.0  108.00  1280 1328 1440 1688  1024 1025 1028 1066 +hsync +vsync (64.0 kHz e)
[    13.393] (II) modeset(0): Modeline "1440x900"x59.9  106.50  1440 1520 1672 1904  900 903 909 934 -hsync +vsync (55.9 kHz e)
[    13.393] (II) modeset(0): Modeline "1440x900"x59.9   88.75  1440 1488 1520 1600  900 903 909 926 +hsync -vsync (55.5 kHz e)
[    13.393] (II) modeset(0): Modeline "1280x960"x60.0  108.00  1280 1376 1488 1800  960 961 964 1000 +hsync +vsync (60.0 kHz e)
[    13.393] (II) modeset(0): Modeline "1366x768"x59.8   85.50  1366 1436 1579 1792  768 771 774 798 +hsync +vsync (47.7 kHz e)
[    13.393] (II) modeset(0): Modeline "1366x768"x60.0   72.00  1366 1380 1436 1500  768 769 772 800 +hsync +vsync (48.0 kHz e)
[    13.393] (II) modeset(0): Modeline "1360x768"x60.0   85.50  1360 1424 1536 1792  768 771 777 795 +hsync +vsync (47.7 kHz e)
[    13.393] (II) modeset(0): Modeline "1280x800"x59.8   83.50  1280 1352 1480 1680  800 803 809 831 -hsync +vsync (49.7 kHz e)
[    13.393] (II) modeset(0): Modeline "1280x800"x59.9   71.00  1280 1328 1360 1440  800 803 809 823 +hsync -vsync (49.3 kHz e)
[    13.393] (II) modeset(0): Modeline "1280x768"x59.9   79.50  1280 1344 1472 1664  768 771 778 798 -hsync +vsync (47.8 kHz e)
[    13.393] (II) modeset(0): Modeline "1280x768"x60.0   68.25  1280 1328 1360 1440  768 771 778 790 +hsync -vsync (47.4 kHz e)
[    13.393] (II) modeset(0): Modeline "1280x720"x60.0   74.25  1280 1390 1430 1650  720 725 730 750 +hsync +vsync (45.0 kHz e)
[    13.393] (II) modeset(0): Modeline "800x600"x60.3   40.00  800 840 968 1056  600 601 605 628 +hsync +vsync (37.9 kHz e)
[    13.393] (II) modeset(0): Modeline "800x600"x56.2   36.00  800 824 896 1024  600 601 603 625 +hsync +vsync (35.2 kHz e)
[    13.393] (II) modeset(0): Modeline "848x480"x60.0   33.75  848 864 976 1088  480 486 494 517 +hsync +vsync (31.0 kHz e)
[    13.393] (II) modeset(0): Modeline "640x480"x59.9   25.18  640 656 752 800  480 490 492 525 -hsync -vsync (31.5 kHz e)
[    13.393] (II) modeset(0): Output Virtual-1 connected
[    13.393] (II) modeset(0): Using exact sizes for initial modes
[    13.393] (II) modeset(0): Output Virtual-1 using initial mode 1024x768 +0+0
[    13.393] (==) modeset(0): Using gamma correction (1.0, 1.0, 1.0)
[    13.393] (==) modeset(0): DPI set to (96, 96)
[    13.393] (II) Loading sub module "fb"
[    13.393] (II) LoadModule: "fb"
[    13.393] (II) Module "fb" already built-in
[    13.393] (II) UnloadModule: "fbdev"
[    13.393] (II) Unloading fbdev
[    13.393] (II) UnloadSubModule: "fbdevhw"
[    13.393] (II) Unloading fbdevhw
[    13.393] (II) UnloadModule: "vesa"
[    13.393] (II) Unloading vesa
[    13.395] (==) modeset(0): Backing store enabled
[    13.395] (==) modeset(0): Silken mouse enabled
[    13.396] (II) modeset(0): Initializing kms color map for depth 24, 8 bpc.
[    13.396] (==) modeset(0): DPMS enabled
[    13.396] (II) Initializing extension Generic Event Extension
[    13.396] (II) Initializing extension SHAPE
[    13.396] (II) Initializing extension MIT-SHM
[    13.396] (II) Initializing extension XInputExtension
[    13.397] (II) Initializing extension XTEST
[    13.397] (II) Initializing extension BIG-REQUESTS
[    13.397] (II) Initializing extension SYNC
[    13.397] (II) Initializing extension XKEYBOARD
[    13.397] (II) Initializing extension XC-MISC
[    13.397] (II) Initializing extension SECURITY
[    13.397] (II) Initializing extension XFIXES
[    13.397] (II) Initializing extension RENDER
[    13.398] (II) Initializing extension RANDR
[    13.398] (II) Initializing extension COMPOSITE
[    13.398] (II) Initializing extension DAMAGE
[    13.398] (II) Initializing extension MIT-SCREEN-SAVER
[    13.398] (II) Initializing extension DOUBLE-BUFFER
[    13.398] (II) Initializing extension RECORD
[    13.398] (II) Initializing extension DPMS
[    13.398] (II) Initializing extension Present
[    13.398] (II) Initializing extension DRI3
[    13.398] (II) Initializing extension X-Resource
[    13.398] (II) Initializing extension XVideo
[    13.398] (II) Initializing extension XVideo-MotionCompensation
[    13.398] (II) Initializing extension SELinux
[    13.398] (II) SELinux: Disabled on system
[    13.398] (II) Initializing extension GLX
[    13.399] (II) AIGLX: Screen 0 is not DRI2 capable
[    13.401] (II) IGLX: Loaded and initialized swrast
[    13.401] (II) GLX: Initialized DRISWRAST GL provider for screen 0
[    13.401] (II) Initializing extension XFree86-VidModeExtension
[    13.401] (II) Initializing extension XFree86-DGA
[    13.401] (II) Initializing extension XFree86-DRI
[    13.401] (II) Initializing extension DRI2
[    13.403] (II) modeset(0): Damage tracking initialized
[    13.403] (II) modeset(0): Setting screen physical size to 270 x 203
[    13.484] (II) config/udev: Adding input device Power Button (/dev/input/event1)
[    13.485] (**) Power Button: Applying InputClass "libinput keyboard catchall"
[    13.485] (II) LoadModule: "libinput"
[    13.485] (II) Loading /usr/lib/xorg/modules/input/libinput_drv.so
[    13.490] (II) Module libinput: vendor="X.Org Foundation"
[    13.490] 	compiled for 1.21.1.15, module version = 1.5.0
[    13.490] 	Module class: X.Org XInput Driver
[    13.490] 	ABI class: X.Org XInput driver, version 24.4
[    13.490] (II) Using input driver 'libinput' for 'Power Button'
[    13.490] (**) Power Button: always reports core events
[    13.490] (**) Option "Device" "/dev/input/event1"
[    13.509] (II) event1  - Power Button: is tagged by udev as: Keyboard
[    13.509] (II) event1  - Power Button: device is a keyboard
[    13.509] (II) event1  - Power Button: device removed
[    13.532] (**) Option "config_info" "udev:/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input2/event1"
[    13.532] (II) XINPUT: Adding extended input device "Power Button" (type: KEYBOARD, id 6)
[    13.532] (**) Option "xkb_model" "pc105"
[    13.532] (**) Option "xkb_layout" "us"
[    13.533] (II) event1  - Power Button: is tagged by udev as: Keyboard
[    13.533] (II) event1  - Power Button: device is a keyboard
[    13.534] (II) config/udev: Adding input device QEMU QEMU USB Tablet (/dev/input/event4)
[    13.534] (**) QEMU QEMU USB Tablet: Applying InputClass "libinput pointer catchall"
[    13.534] (II) Using input driver 'libinput' for 'QEMU QEMU USB Tablet'
[    13.534] (**) QEMU QEMU USB Tablet: always reports core events
[    13.534] (**) Option "Device" "/dev/input/event4"
[    13.673] (II) event4  - QEMU QEMU USB Tablet: is tagged by udev as: Mouse
[    13.674] (II) event4  - QEMU QEMU USB Tablet: device is a pointer
[    13.674] (II) event4  - QEMU QEMU USB Tablet: device removed
[    13.708] (**) Option "config_info" "udev:/sys/devices/pci0000:00/0000:00:01.2/usb1/1-1/1-1:1.0/0003:0627:0001.0001/input/input5/event4"
[    13.708] (II) XINPUT: Adding extended input device "QEMU QEMU USB Tablet" (type: MOUSE, id 7)
[    13.708] (**) Option "AccelerationScheme" "none"
[    13.708] (**) QEMU QEMU USB Tablet: (accel) selected scheme none/0
[    13.708] (**) QEMU QEMU USB Tablet: (accel) acceleration factor: 2.000
[    13.708] (**) QEMU QEMU USB Tablet: (accel) acceleration threshold: 4
[    13.765] (II) event4  - QEMU QEMU USB Tablet: is tagged by udev as: Mouse
[    13.765] (II) event4  - QEMU QEMU USB Tablet: device is a pointer
[    13.767] (II) config/udev: Adding input device QEMU QEMU USB Tablet (/dev/input/mouse2)
[    13.767] (II) No input driver specified, ignoring this device.
[    13.767] (II) This device may have been added with another device file.
[    13.768] (II) config/udev: Adding input device QEMU QEMU USB Keyboard (/dev/input/event5)
[    13.768] (**) QEMU QEMU USB Keyboard: Applying InputClass "libinput keyboard catchall"
[    13.768] (II) Using input driver 'libinput' for 'QEMU QEMU USB Keyboard'
[    13.768] (**) QEMU QEMU USB Keyboard: always reports core events
[    13.768] (**) Option "Device" "/dev/input/event5"
[    13.770] (II) event5  - QEMU QEMU USB Keyboard: is tagged by udev as: Keyboard
[    13.770] (II) event5  - QEMU QEMU USB Keyboard: device is a keyboard
[    13.770] (II) event5  - QEMU QEMU USB Keyboard: device removed
[    13.788] (**) Option "config_info" "udev:/sys/devices/pci0000:00/0000:00:01.2/usb1/1-2/1-2:1.0/0003:0627:0001.0002/input/input6/event5"
[    13.788] (II) XINPUT: Adding extended input device "QEMU QEMU USB Keyboard" (type: KEYBOARD, id 8)
[    13.788] (**) Option "xkb_model" "pc105"
[    13.788] (**) Option "xkb_layout" "us"
[    13.789] (II) event5  - QEMU QEMU USB Keyboard: is tagged by udev as: Keyboard
[    13.790] (II) event5  - QEMU QEMU USB Keyboard: device is a keyboard
[    13.791] (II) config/udev: Adding input device AT Translated Set 2 keyboard (/dev/input/event0)
[    13.791] (**) AT Translated Set 2 keyboard: Applying InputClass "libinput keyboard catchall"
[    13.791] (II) Using input driver 'libinput' for 'AT Translated Set 2 keyboard'
[    13.791] (**) AT Translated Set 2 keyboard: always reports core events
[    13.791] (**) Option "Device" "/dev/input/event0"
[    13.792] (II) event0  - AT Translated Set 2 keyboard: is tagged by udev as: Keyboard
[    13.792] (II) event0  - AT Translated Set 2 keyboard: device is a keyboard
[    13.792] (II) event0  - AT Translated Set 2 keyboard: device removed
[    13.812] (**) Option "config_info" "udev:/sys/devices/platform/i8042/serio0/input/input0/event0"
[    13.812] (II) XINPUT: Adding extended input device "AT Translated Set 2 keyboard" (type: KEYBOARD, id 9)
[    13.812] (**) Option "xkb_model" "pc105"
[    13.812] (**) Option "xkb_layout" "us"
[    13.813] (II) event0  - AT Translated Set 2 keyboard: is tagged by udev as: Keyboard
[    13.813] (II) event0  - AT Translated Set 2 keyboard: device is a keyboard
[    13.814] (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/event3)
[    13.814] (**) VirtualPS/2 VMware VMMouse: Applying InputClass "libinput pointer catchall"
[    13.814] (II) Using input driver 'libinput' for 'VirtualPS/2 VMware VMMouse'
[    13.814] (**) VirtualPS/2 VMware VMMouse: always reports core events
[    13.814] (**) Option "Device" "/dev/input/event3"
[    13.815] (II) event3  - VirtualPS/2 VMware VMMouse: is tagged by udev as: Mouse
[    13.816] (II) event3  - VirtualPS/2 VMware VMMouse: device is a pointer
[    13.816] (II) event3  - VirtualPS/2 VMware VMMouse: device removed
[    13.852] (II) libinput: VirtualPS/2 VMware VMMouse: Step value 0 was provided, libinput Fallback acceleration function is used.
[    13.852] (II) libinput: VirtualPS/2 VMware VMMouse: Step value 0 was provided, libinput Fallback acceleration function is used.


_raw: Cloud-init v. 25.3 running 'modules:config' at Sat, 10 Jan 2026 14:05:07 +0000. Up 12.85 seconds.


_raw: [  OK  ] Started rpc-statd-notify.service - Notify NFS peers of a restart.


_raw: Starting rpc-statd-notify.service - Notify NFS peers of a restart...


_raw: [  OK  ] Started laforge-agent.service - Tool used for monitoring hosts. NOT IN COMPETITION SCOPE.


_raw: Starting cloud-config.service - Cloud-init: Config Stage...


_raw: [  OK  ] Reached target network-online.target - Network is Online.


_raw: [  OK  ] Started xrdp-sesman.service - xrdp session manager.


_raw: [  OK  ] Finished NetworkManager-wait-online.service - Network Manager Wait Online.


_raw: Starting plymouth-quit-wait.service - Hold until boot process finishes up...


_raw: Starting lightdm.service - Light Display Manager...


_raw: [  OK  ] Started NetworkManager-dispatcher.service - Network Manager Script Dispatcher Service.


_raw: [  OK  ] Finished systemd-user-sessions.service - Permit User Sessions.


_raw: Starting xrdp-sesman.service - xrdp session manager...


_raw: Starting systemd-user-sessions.service - Permit User Sessions...


_raw: Starting NetworkManager-wait-online.service - Network Manager Wait Online...


_raw: [  OK  ] Reached target network.target - Network.


_raw: [  OK  ] Started NetworkManager.service - Network Manager.


_raw: Starting NetworkManager-dispatcher.service - Network Manager Script Dispatcher Service...


_raw: [  OK  ] Started systemd-hostnamed.service - Hostname Service.


_raw: [  OK  ] Started ModemManager.service - Modem Manager.


_raw: Starting systemd-hostnamed.service - Hostname Service...


_raw: [  OK  ] Started accounts-daemon.service - Accounts Service.


_raw: Starting ModemManager.service - Modem Manager...


_raw: [  OK  ] Started polkit.service - Authorization Manager.


_raw: [  OK  ] Started systemd-logind.service - User Login Management.


_raw: Starting NetworkManager.service - Network Manager...


_raw: [  OK  ] Started dbus.service - D-Bus System Message Bus.


_raw: [  OK  ] Started cleanup.service - LSB: Cleanup removable media and thinclient drives.


_raw: Starting systemd-logind.service - User Login Management...


_raw: Starting splunk.service - LSB: Start splunk...


_raw: [  OK  ] Started qemu-guest-agent.service - QEMU Guest Agent.


_raw: Starting polkit.service - Authorization Manager...


_raw: Starting dbus.service - D-Bus System Message Bus...


_raw: [  OK  ] Started cron.service - Regular background program processing daemon.


_raw: Starting cleanup.service - LSB: Cleanup removable media and thinclient drives...


_raw: Starting accounts-daemon.service - Accounts Service...


_raw: [  OK  ] Reached target basic.target - Basic System.


_raw: [  OK  ] Reached target sockets.target - Socket Units.


_raw: [  OK  ] Listening on pcscd.socket - PC/SC Smart Card Daemon Activation Socket.


_raw: [  OK  ] Listening on systemd-logind-varlink.socket - User Login Management Varlink Socket.


_raw: [  OK  ] Listening on systemd-hostnamed.socket - Hostname Service Socket.


_raw: [  OK  ] Listening on sshd-unix-local.socket - OpenSSH Server Socket (systemd-ssh-generator, AF_UNIX Local).


_raw: Starting pcscd.socket - PC/SC Smart Card Daemon Activation Socket...


_raw: [  OK  ] Listening on dbus.socket - D-Bus System Message Bus Socket.


_raw: [  OK  ] Reached target timers.target - Timer Units.


_raw: [  OK  ] Started systemd-tmpfiles-clean.timer - Daily Cleanup of Temporary Directories.


_raw: [  OK  ] Started plocate-updatedb.timer - Update the plocate database daily.


_raw: [  OK  ] Started phpsessionclean.timer - Clean PHP session files every 30 mins.


_raw: [  OK  ] Started man-db.timer - Daily man-db regeneration.


_raw: [  OK  ] Started logrotate.timer - Daily rotation of log files.


_raw: [  OK  ] Started fstrim.timer - Discard unused filesystem blocks once a week.


_raw: [  OK  ] Started e2scrub_all.timer - Periodic ext4 Online Metadata Check for All Filesystems.


_raw: [  OK  ] Started dpkg-db-backup.timer - Daily dpkg database backup timer.


_raw: [  OK  ] Started apt-daily-upgrade.timer - Daily apt upgrade and clean activities.


_raw: [  OK  ] Started apt-daily.timer - Daily apt download activities.


_raw: [  OK  ] Reached target sysinit.target - System Initialization.


_raw: [  OK  ] Reached target cloud-config.target - Cloud-config availability.


_raw: [  OK  ] Finished cloud-init-network.service - Cloud-init: Network Stage.


_raw: [   12.427576] sh[712]: Completed socket interaction for boot stage network


_raw: [   12.267346] cloud-init[510]: ci-info: | Route | Destination | Gateway | Interface | Flags |


_raw: [   12.267087] cloud-init[510]: ci-info: | Route |   Destination   |   Gateway    |     Genmask     | Interface | Flags |


_raw: [   12.266828] cloud-init[510]: ci-info: | Device |  Up  |           Address            |      Mask     | Scope  |     Hw-Address    |


_raw:
[20260110-09:05:05] [INFO ] ++ reconnected session: username pentester, display :10.0, session_pid 231837, ip ::ffff:10.0.254.103:60246 - socket: 12
[20260110-09:05:05] [INFO ] Starting session reconnection script on display 10: /etc/xrdp/reconnectwm.sh
[20260110-09:05:05] [ERROR] sesman_data_in: scp_process_msg failed
[20260110-09:05:05] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260110-09:05:05] [INFO ] Process 999640 has exited


_raw:
[20260110-09:05:05] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260110-09:05:05] [INFO ] sesman connect ok
[20260110-09:05:05] [INFO ] sending login info to session manager. Please wait...
[20260110-09:05:05] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260110-09:05:05] [INFO ] login successful for user pentester on display 10
[20260110-09:05:05] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260110-09:05:05] [INFO ] started connecting
[20260110-09:05:05] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260110-09:05:05] [INFO ] lib_mod_log_peer: xrdp_pid=999264 connected to X11rdp_pid=231866 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.103 client_port=60246
[20260110-09:05:05] [INFO ] connected ok


_raw: [20260110-09:05:05] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 47572


_raw: 2026-01-10 09:05:01.901 EST [419503] LOG:  checkpoint complete: wrote 5 buffers (0.0%), wrote 2 SLRU buffers; 0 WAL file(s) added, 0 removed, 0 recycled; write=0.505 s, sync=0.016 s, total=0.532 s; sync files=5, longest=0.009 s, average=0.004 s; distance=30 kB, estimate=174240 kB; lsn=C/19913CA0, redo lsn=C/19913C48


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:05:01.002: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:938): Gtk-WARNING **: 09:05:00.987: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:05:00.985: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:05:00.976: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:05:00.976: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:05:00.963: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:949): Gtk-WARNING **: 09:05:00.952: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:05:00.927: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:971): Gtk-WARNING **: 09:05:00.897: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:969): Gtk-WARNING **: 09:05:00.893: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1158): Gtk-WARNING **: 09:05:00.878: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:05:00.878: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:946): Gtk-WARNING **: 09:05:00.865: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:944): Gtk-WARNING **: 09:05:00.843: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:944): Gtk-WARNING **: 09:05:00.815: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:05:00.811: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1153): Gtk-WARNING **: 09:05:00.788: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:05:00.784: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:05:00.780: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1319): Gtk-WARNING **: 09:05:00.728: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:05:00.700: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:961): Gtk-WARNING **: 09:05:00.699: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:05:00.680: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:05:00.672: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:05:00.652: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:934): Gtk-WARNING **: 09:05:00.630: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:941): Gtk-WARNING **: 09:05:00.629: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:05:00.608: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:948): Gtk-WARNING **: 09:05:00.586: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:933): Gtk-WARNING **: 09:05:00.569: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:938): Gtk-WARNING **: 09:05:00.565: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:05:00.560: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:928): Gtk-WARNING **: 09:05:00.558: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:05:00.548: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:05:00.541: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:945): Gtk-WARNING **: 09:05:00.533: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1165): Gtk-WARNING **: 09:05:00.518: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:05:00.503: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:961): Gtk-WARNING **: 09:05:00.489: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:944): Gtk-WARNING **: 09:05:00.486: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:05:00.471: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:05:00.457: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:946): Gtk-WARNING **: 09:05:00.454: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:932): Gtk-WARNING **: 09:05:00.415: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:05:00.400: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:05:00.398: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1044): Gtk-WARNING **: 09:05:00.384: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:05:00.363: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1151): Gtk-WARNING **: 09:05:00.336: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:05:00.328: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:05:00.311: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:05:00.287: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:05:00.250: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:946): Gtk-WARNING **: 09:05:00.247: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:968): Gtk-WARNING **: 09:05:00.219: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:952): Gtk-WARNING **: 09:05:00.207: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:944): Gtk-WARNING **: 09:05:00.188: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:938): Gtk-WARNING **: 09:05:00.177: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:05:00.170: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:05:00.168: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:05:00.158: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:05:00.156: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1149): Gtk-WARNING **: 09:05:00.153: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:05:00.141: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:948): Gtk-WARNING **: 09:05:00.089: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:05:00.084: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:05:00.073: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:941): Gtk-WARNING **: 09:05:00.070: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:959): Gtk-WARNING **: 09:05:00.037: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:05:00.031: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:05:00.024: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:934): Gtk-WARNING **: 09:05:00.008: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: Starting cloud-init-network.service - Cloud-init: Network Stage...


_raw: [  OK  ] Finished networking.service - Raise network interfaces.


_raw: [    **] Job networking.service/start running (8s / 5min 7s)


_raw: [     *] Job networking.service/start running (7s / 5min 1s)


_raw: [    **] Job networking.service/start running (7s / 5min 1s)


_raw: [   ***] Job networking.service/start running (6s / 5min 1s)


_raw: [  *** ] Job networking.service/start running (5s / 5min 1s)


_raw: [ ***  ] Job networking.service/start running (5s / 5min 1s)


_raw: [***   ] Job networking.service/start running (4s / 5min 1s)


_raw: [**    ] Job networking.service/start running (4s / 5min 1s)


_raw: [*     ] Job networking.service/start running (3s / 5min 1s)


_raw: [  OK  ] Listening on systemd-rfkill.socket - Load/Save RF Kill Switch Status /dev/rfkill Watch.


_raw: [  OK  ] Reached target remote-fs.target - Remote File Systems.


_raw: [  OK  ] Reached target remote-fs-pre.target - Preparation for Remote File Systems.


_raw: [  OK  ] Reached target nfs-client.target - NFS client services.


_raw: [  OK  ] Reached target rpc_pipefs.target.


_raw: [  OK  ] Mounted run-rpc_pipefs.mount - RPC Pipe File System.


_raw: [  OK  ] Started haveged.service - Entropy Daemon based on the HAVEGE algorithm.


_raw: Mounting run-rpc_pipefs.mount - RPC Pipe File System...


_raw: [  OK  ] Finished systemd-tmpfiles-setup.service - Create System Files and Directories.


_raw: [  OK  ] Finished systemd-binfmt.service - Set Up Additional Binary Formats.


_raw: [  OK  ] Mounted proc-sys-fs-binfmt_misc.mount - Arbitrary Executable File Formats File System.


_raw: [  OK  ] Finished plymouth-read-write.service - Tell Plymouth To Write Out Runtime Data.


_raw: [!p]104]3008;start=c1212431078b4b5e8de4434141217656;user=root;hostname=cptc11-finals-t1-vdi-kali05;machineid=a228eb2545ab47aa801207fbd68e16c1;bootid=e3cdce7313094c8ab38310693eae7c3f;pid=1;pidfdid=2;comm=systemd;type=boot\[    5.234173] cloud-init[510]: Cloud-init v. 25.3 running 'init-local' at Sat, 10 Jan 2026 14:04:59 +0000. Up 5.21 seconds.


_raw: Cloud-init v. 25.3 running 'init-local' at Sat, 10 Jan 2026 14:04:59 +0000. Up 5.21 seconds.


_raw:
disabled in /etc/default/macchanger
disabled in /etc/default/macchanger
disabled in /etc/default/macchanger
disabled in /etc/default/macchanger
disabled in /etc/default/macchanger
disabled in /etc/default/macchanger
disabled in /etc/default/macchanger
disabled in /etc/default/macchanger
disabled in /etc/default/macchanger
disabled in /etc/default/macchanger
disabled in /etc/default/macchanger
disabled in /etc/default/macchanger


_raw:
[20260110-09:04:57] [ERROR] pam_authenticate failed: Authentication failure
[20260110-09:04:57] [INFO ] AUTHFAIL: user=pentester ip=::ffff:10.0.254.103 time=1768053897
[20260110-09:04:57] [ERROR] sesman_data_in: scp_process_msg failed
[20260110-09:04:57] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans


_raw:
[20260110-09:04:55] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260110-09:04:55] [INFO ] sesman connect ok
[20260110-09:04:55] [INFO ] sending login info to session manager. Please wait...
[20260110-09:04:57] [INFO ] xrdp_wm_log_msg: login failed for user pentester
[20260110-09:04:57] [INFO ] login failed for user pentester


_raw: [20260110-09:04:55] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 57814


_raw:
[20260110-09:04:52] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260110-09:04:52] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260110-09:04:52] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260110-09:04:52] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260110-09:04:52] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260110-09:04:52] [ERROR] libxrdp_force_read: header read error
[20260110-09:04:52] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260110-09:04:52] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260110-09:04:52] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260110-09:04:52] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260110-09:04:52] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260110-09:04:52] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260110-09:04:52] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260110-09:04:54] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.105 port 59846
[20260110-09:04:54] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260110-09:04:54] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260110-09:04:54] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260110-09:04:54] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260110-09:04:54] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260110-09:04:54] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260110-09:04:54] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260110-09:04:54] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260110-09:04:54] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260110-09:04:54] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260110-09:04:54] [INFO ] Non-TLS connection established from ::ffff:10.0.254.105 port 59846: with security level : high
[20260110-09:04:54] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260110-09:04:54] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260110-09:04:54] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260110-09:04:54] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260110-09:04:54] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260110-09:04:54] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260110-09:04:54] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: [20260110-09:04:52] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.105 port 59845


_raw: 2026-01-10 09:04:46.122 EST [46078] LOG:  checkpoint complete: wrote 6 buffers (0.0%), wrote 1 SLRU buffers; 0 WAL file(s) added, 0 removed, 0 recycled; write=0.604 s, sync=0.005 s, total=0.619 s; sync files=5, longest=0.003 s, average=0.001 s; distance=45 kB, estimate=45 kB; lsn=0/24C8230, redo lsn=0/24C81D8


_raw:
[20260110-09:04:32] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260110-09:04:32] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260110-09:04:32] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260110-09:04:32] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260110-09:04:32] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260110-09:04:32] [ERROR] libxrdp_force_read: header read error
[20260110-09:04:32] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260110-09:04:32] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260110-09:04:32] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260110-09:04:32] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260110-09:04:32] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260110-09:04:32] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260110-09:04:32] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260110-09:04:32] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.103 port 60246
[20260110-09:04:32] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260110-09:04:32] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260110-09:04:32] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260110-09:04:32] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260110-09:04:32] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260110-09:04:32] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260110-09:04:32] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260110-09:04:32] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260110-09:04:32] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260110-09:04:32] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260110-09:04:32] [INFO ] Non-TLS connection established from ::ffff:10.0.254.103 port 60246: with security level : high
[20260110-09:04:32] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260110-09:04:32] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260110-09:04:32] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260110-09:04:32] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260110-09:04:32] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260110-09:04:32] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260110-09:04:32] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: [20260110-09:04:32] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.103 port 60245


_raw: 2026-01-10 09:04:28.098 EST [235053] LOG:  checkpoint complete: wrote 5 buffers (0.0%), wrote 1 SLRU buffers; 0 WAL file(s) added, 0 removed, 0 recycled; write=0.504 s, sync=0.005 s, total=0.518 s; sync files=5, longest=0.003 s, average=0.001 s; distance=37 kB, estimate=37 kB; lsn=0/2A5C510, redo lsn=0/2A5C4B8


_raw:
[20260110-09:04:28] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 43892
[20260110-09:04:28] [INFO ] ++ reconnected session: username pentester, display :10.0, session_pid 229193, ip ::ffff:10.0.254.101:60156 - socket: 12
[20260110-09:04:28] [ERROR] sesman_data_in: scp_process_msg failed
[20260110-09:04:28] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260110-09:04:28] [INFO ] Starting session reconnection script on display 10: /etc/xrdp/reconnectwm.sh
[20260110-09:04:28] [INFO ] Process 974542 has exited