_raw: (lightdm-gtk-greeter:944): Gtk-WARNING **: 09:50:00.327: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:50:00.283: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:948): Gtk-WARNING **: 09:50:00.282: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:50:00.273: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:50:00.265: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:946): Gtk-WARNING **: 09:50:00.246: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:932): Gtk-WARNING **: 09:50:00.242: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:50:00.237: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:50:00.228: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:50:00.222: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:50:00.221: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:941): Gtk-WARNING **: 09:50:00.210: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:952): Gtk-WARNING **: 09:50:00.200: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:50:00.198: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:50:00.194: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:928): Gtk-WARNING **: 09:50:00.170: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1044): Gtk-WARNING **: 09:50:00.146: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1151): Gtk-WARNING **: 09:50:00.145: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:50:00.141: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:938): Gtk-WARNING **: 09:50:00.086: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:934): Gtk-WARNING **: 09:50:00.069: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:934): Gtk-WARNING **: 09:50:00.044: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:50:00.026: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:968): Gtk-WARNING **: 09:50:00.021: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:945): Gtk-WARNING **: 09:50:00.019: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw:
Setting up openjdk-11-jre:amd64 (11.0.25~5ea-1) ...
Setting up neo4j (5.2.0+really4.4.26-0kali1) ...
Setting up bloodhound (8.3.1-0kali1) ...

_sourcetype: term

sourcetype: term


_raw: 2026-01-09 09:50:00 status installed bloodhound:amd64 8.3.1-0kali1


_raw: 2026-01-09 09:50:00 status half-configured bloodhound:amd64 8.3.1-0kali1


_raw: 2026-01-09 09:50:00 status unpacked bloodhound:amd64 8.3.1-0kali1


_raw: 2026-01-09 09:50:00 status half-configured neo4j:all 5.2.0+really4.4.26-0kali1


_raw: 2026-01-09 09:50:00 status installed ca-certificates-java:all 20240118


_raw: 2026-01-09 09:50:00 status installed openjdk-11-jre-headless:amd64 11.0.25~5ea-1


_raw: 2026-01-09 09:50:00 status half-configured ca-certificates-java:all 20240118


_raw: 2026-01-09 09:50:00 trigproc ca-certificates-java:all 20240118 <none>


_raw: 2026-01-09 09:50:00 status installed hicolor-icon-theme:all 0.18-2


_raw: 2026-01-09 09:50:00 status half-configured hicolor-icon-theme:all 0.18-2


_raw: 2026-01-09 09:50:00 trigproc hicolor-icon-theme:all 0.18-2 <none>


_raw: 2026-01-09 09:50:00 status installed desktop-file-utils:amd64 0.28-1


_raw: 2026-01-09 09:50:00 status half-configured desktop-file-utils:amd64 0.28-1


_raw: 2026-01-09 09:50:00 trigproc desktop-file-utils:amd64 0.28-1 <none>


_raw:
Created symlink '/etc/systemd/system/multi-user.target.wants/binfmt-support.service' → '/usr/lib/systemd/system/binfmt-support.service'.
Setting up azurehound (2.8.1-0kali1) ...
Setting up bloodyad (2.1.7-0kali1) ...
Setting up jarwrapper (0.81) ...
Processing triggers for man-db (2.13.1-1) ...
Processing triggers for kali-menu (2025.4.3) ...
Processing triggers for desktop-file-utils (0.28-1) ...
Processing triggers for hicolor-icon-theme (0.18-2) ...
Processing triggers for ca-certificates-java (20240118) ...
done.


_raw: 2026-01-09 09:49:59 status half-configured kali-menu:all 2025.4.3


_raw: 2026-01-09 09:49:58 status installed jarwrapper:all 0.81


_raw: 2026-01-09 09:49:58 status half-configured jarwrapper:all 0.81


_raw: 2026-01-09 09:49:58 status unpacked jarwrapper:all 0.81


_raw: 2026-01-09 09:49:58 configure jarwrapper:all 0.81 <none>


_raw: 2026-01-09 09:49:58 status installed bloodyad:all 2.1.7-0kali1


_raw: 2026-01-09 09:49:58 status half-configured bloodyad:all 2.1.7-0kali1


_raw: 2026-01-09 09:49:58 status unpacked bloodyad:all 2.1.7-0kali1


_raw: 2026-01-09 09:49:58 status installed azurehound:amd64 2.8.1-0kali1


_raw: 2026-01-09 09:49:58 status half-configured azurehound:amd64 2.8.1-0kali1


_raw: 2026-01-09 09:49:58 status unpacked azurehound:amd64 2.8.1-0kali1


_raw: 2026-01-09 09:49:58 status installed binfmt-support:amd64 2.2.2-7


_raw: 2026-01-09 09:49:57 status half-configured binfmt-support:amd64 2.2.2-7


_raw: 2026-01-09 09:49:57 status unpacked binfmt-support:amd64 2.2.2-7


_raw: 2026-01-09 09:49:57 status installed sharphound:all 2.8.0-0kali1


_raw: 2026-01-09 09:49:57 status half-configured sharphound:all 2.8.0-0kali1


_raw: 2026-01-09 09:49:57 status unpacked sharphound:all 2.8.0-0kali1


_raw: 2026-01-09 09:49:57 configure sharphound:all 2.8.0-0kali1 <none>


_raw: 2026-01-09 09:49:57 status triggers-awaited openjdk-11-jre-headless:amd64 11.0.25~5ea-1


_raw: 2026-01-09 09:49:57 status triggers-pending ca-certificates-java:all 20240118


_raw: 2026-01-09 09:49:57 status installed openjdk-11-jre-headless:amd64 11.0.25~5ea-1


_raw:
Selecting previously unselected package bloodhound.
Preparing to unpack .../7-bloodhound_8.3.1-0kali1_amd64.deb ...
Unpacking bloodhound (8.3.1-0kali1) ...
Selecting previously unselected package bloodyad.
Preparing to unpack .../8-bloodyad_2.1.7-0kali1_all.deb ...
Unpacking bloodyad (2.1.7-0kali1) ...
Selecting previously unselected package sharphound.
Preparing to unpack .../9-sharphound_2.8.0-0kali1_all.deb ...
Unpacking sharphound (2.8.0-0kali1) ...
Setting up fastjar (2:0.98-7) ...
Setting up openjdk-11-jre-headless:amd64 (11.0.25~5ea-1) ...
update-alternatives: using /usr/lib/jvm/java-11-openjdk-amd64/bin/jjs to provide /usr/bin/jjs (jjs) in auto mode
update-alternatives: using /usr/lib/jvm/java-11-openjdk-amd64/bin/rmid to provide /usr/bin/rmid (rmid) in auto mode
update-alternatives: using /usr/lib/jvm/java-11-openjdk-amd64/bin/pack200 to provide /usr/bin/pack200 (pack200) in auto mode
update-alternatives: using /usr/lib/jvm/java-11-openjdk-amd64/bin/unpack200 to provide /usr/bin/unpack200 (unpack200) in auto mode
Setting up sharphound (2.8.0-0kali1) ...
Setting up binfmt-support (2.2.2-7) ...
update-binfmts: warning: python3.13 already enabled in kernel.
update-binfmts: warning: llvm-19-runtime.binfmt already enabled in kernel.
update-binfmts: warning: llvm-18-runtime.binfmt already enabled in kernel.


_raw: update-alternatives 2026-01-09 09:49:57: run with --install /usr/bin/jexec jexec /usr/lib/jvm/java-11-openjdk-amd64/lib/jexec 1111 --slave /usr/share/binfmts/jar jexec-binfmt /usr/lib/jvm/java-11-openjdk-amd64/lib/jar.binfmt


_raw: update-alternatives 2026-01-09 09:49:57: link group unpack200 updated to point to /usr/lib/jvm/java-11-openjdk-amd64/bin/unpack200


_raw: update-alternatives 2026-01-09 09:49:57: run with --install /usr/bin/unpack200 unpack200 /usr/lib/jvm/java-11-openjdk-amd64/bin/unpack200 1111 --slave /usr/share/man/man1/unpack200.1.gz unpack200.1.gz /usr/lib/jvm/java-11-openjdk-amd64/man/man1/unpack200.1.gz


_raw: update-alternatives 2026-01-09 09:49:57: link group pack200 updated to point to /usr/lib/jvm/java-11-openjdk-amd64/bin/pack200


_raw: update-alternatives 2026-01-09 09:49:57: run with --install /usr/bin/pack200 pack200 /usr/lib/jvm/java-11-openjdk-amd64/bin/pack200 1111 --slave /usr/share/man/man1/pack200.1.gz pack200.1.gz /usr/lib/jvm/java-11-openjdk-amd64/man/man1/pack200.1.gz


_raw: 2026-01-09 09:49:56 status half-configured openjdk-11-jre-headless:amd64 11.0.25~5ea-1


_raw: 2026-01-09 09:49:56 status unpacked openjdk-11-jre-headless:amd64 11.0.25~5ea-1


_raw: 2026-01-09 09:49:56 status half-configured fastjar:amd64 2:0.98-7


_raw: 2026-01-09 09:49:56 startup packages configure


_raw: update-alternatives 2026-01-09 09:49:56: run with --install /usr/bin/rmiregistry rmiregistry /usr/lib/jvm/java-11-openjdk-amd64/bin/rmiregistry 1111 --slave /usr/share/man/man1/rmiregistry.1.gz rmiregistry.1.gz /usr/lib/jvm/java-11-openjdk-amd64/man/man1/rmiregistry.1.gz


_raw: update-alternatives 2026-01-09 09:49:56: link group rmid updated to point to /usr/lib/jvm/java-11-openjdk-amd64/bin/rmid


_raw: update-alternatives 2026-01-09 09:49:56: run with --install /usr/bin/rmid rmid /usr/lib/jvm/java-11-openjdk-amd64/bin/rmid 1111 --slave /usr/share/man/man1/rmid.1.gz rmid.1.gz /usr/lib/jvm/java-11-openjdk-amd64/man/man1/rmid.1.gz


_raw: update-alternatives 2026-01-09 09:49:56: run with --install /usr/bin/keytool keytool /usr/lib/jvm/java-11-openjdk-amd64/bin/keytool 1111 --slave /usr/share/man/man1/keytool.1.gz keytool.1.gz /usr/lib/jvm/java-11-openjdk-amd64/man/man1/keytool.1.gz


_raw: update-alternatives 2026-01-09 09:49:56: link group jjs updated to point to /usr/lib/jvm/java-11-openjdk-amd64/bin/jjs


_raw: update-alternatives 2026-01-09 09:49:56: run with --install /usr/bin/jjs jjs /usr/lib/jvm/java-11-openjdk-amd64/bin/jjs 1111 --slave /usr/share/man/man1/jjs.1.gz jjs.1.gz /usr/lib/jvm/java-11-openjdk-amd64/man/man1/jjs.1.gz


_raw: update-alternatives 2026-01-09 09:49:56: run with --install /usr/bin/java java /usr/lib/jvm/java-11-openjdk-amd64/bin/java 1111 --slave /usr/share/man/man1/java.1.gz java.1.gz /usr/lib/jvm/java-11-openjdk-amd64/man/man1/java.1.gz


_raw: update-alternatives 2026-01-09 09:49:56: link group jar updated to point to /usr/bin/fastjar


_raw: update-alternatives 2026-01-09 09:49:56: run with --quiet --install /usr/bin/jar jar /usr/bin/fastjar 100 --slave /usr/share/man/man1/jar.1.gz jar.1.gz /usr/share/man/man1/fastjar.1.gz


_raw: 2026-01-09 09:49:56 status unpacked sharphound:all 2.8.0-0kali1


_raw: 2026-01-09 09:49:56 status half-installed sharphound:all 2.8.0-0kali1


_raw: 2026-01-09 09:49:56 status unpacked bloodyad:all 2.1.7-0kali1


_raw: 2026-01-09 09:49:56 status half-installed bloodyad:all 2.1.7-0kali1


_raw: 2026-01-09 09:49:56 status unpacked bloodhound:amd64 8.3.1-0kali1


_raw: 2026-01-09 09:49:55 status half-installed bloodhound:amd64 8.3.1-0kali1


_raw: 2026-01-09 09:49:54 status half-installed neo4j:all 5.2.0+really4.4.26-0kali1


_raw:
Selecting previously unselected package binfmt-support.
(Reading database ...
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 454625 files and directories currently installed.)
Preparing to unpack .../0-binfmt-support_2.2.2-7_amd64.deb ...
Unpacking binfmt-support (2.2.2-7) ...
Selecting previously unselected package azurehound.
Preparing to unpack .../1-azurehound_2.8.1-0kali1_amd64.deb ...
Unpacking azurehound (2.8.1-0kali1) ...
Selecting previously unselected package fastjar.
Preparing to unpack .../2-fastjar_2%3a0.98-7_amd64.deb ...
Unpacking fastjar (2:0.98-7) ...
Selecting previously unselected package jarwrapper.
Preparing to unpack .../3-jarwrapper_0.81_all.deb ...
Unpacking jarwrapper (0.81) ...
Selecting previously unselected package openjdk-11-jre-headless:amd64.
Preparing to unpack .../4-openjdk-11-jre-headless_11.0.25~5ea-1_amd64.deb ...
Unpacking openjdk-11-jre-headless:amd64 (11.0.25~5ea-1) ...
Selecting previously unselected package openjdk-11-jre:amd64.
Preparing to unpack .../5-openjdk-11-jre_11.0.25~5ea-1_amd64.deb ...
Unpacking openjdk-11-jre:amd64 (11.0.25~5ea-1) ...
Selecting previously unselected package neo4j.
Preparing to unpack .../6-neo4j_5.2.0+really4.4.26-0kali1_all.deb ...
Unpacking neo4j (5.2.0+really4.4.26-0kali1) ...


_raw: 2026-01-09 09:49:53 status triggers-pending hicolor-icon-theme:all 0.18-2


_raw: 2026-01-09 09:49:53 status triggers-pending desktop-file-utils:amd64 0.28-1


_raw: 2026-01-09 09:49:53 status unpacked openjdk-11-jre-headless:amd64 11.0.25~5ea-1


_raw:
[20260109-09:49:52] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:49:52] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:49:52] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:49:52] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:49:52] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260109-09:49:52] [ERROR] libxrdp_force_read: header read error
[20260109-09:49:52] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260109-09:49:52] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260109-09:49:52] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260109-09:49:53] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260109-09:49:53] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260109-09:49:53] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260109-09:49:53] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260109-09:49:53] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.105 port 57994
[20260109-09:49:53] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:49:53] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:49:53] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:49:53] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:49:53] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:49:53] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:49:53] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:49:53] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:49:53] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:49:53] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:49:53] [INFO ] Non-TLS connection established from ::ffff:10.0.254.105 port 57994: with security level : high
[20260109-09:49:54] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:49:54] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:49:54] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:49:54] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:49:54] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:49:54] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:49:54] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: [20260109-09:49:52] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.105 port 57993


_raw: 2026-01-09 09:49:52 status half-installed openjdk-11-jre-headless:amd64 11.0.25~5ea-1


_raw: 2026-01-09 09:49:52 status unpacked jarwrapper:all 0.81


_raw: 2026-01-09 09:49:52 status half-installed jarwrapper:all 0.81


_raw: 2026-01-09 09:49:52 status unpacked azurehound:amd64 2.8.1-0kali1


_raw: 2026-01-09 09:49:52 status half-installed azurehound:amd64 2.8.1-0kali1


_raw: 2026-01-09 09:49:52 status unpacked binfmt-support:amd64 2.2.2-7


_raw: 2026-01-09 09:49:52 status triggers-pending kali-menu:all 2025.4.3


_raw: 2026-01-09 09:49:52 status half-installed binfmt-support:amd64 2.2.2-7


_raw: Processing triggers for kali-menu (2025.4.3) ...


_raw: 2026-01-09 09:49:51 startup archives unpack


_raw:
Start-Date: 2026-01-09  09:49:51
Commandline: apt-get install bloodhound bloodyad
Requested-By: pentester (1001)
Install: openjdk-11-jre:amd64 (11.0.25~5ea-1, automatic), openjdk-11-jre-headless:amd64 (11.0.25~5ea-1, automatic), binfmt-support:amd64 (2.2.2-7, automatic), jarwrapper:amd64 (0.81, automatic), sharphound:amd64 (2.8.0-0kali1, automatic), azurehound:amd64 (2.8.1-0kali1, automatic), bloodhound:amd64 (8.3.1-0kali1), fastjar:amd64 (2:0.98-7, automatic), neo4j:amd64 (5.2.0+really4.4.26-0kali1, automatic), bloodyad:amd64 (2.1.7-0kali1)


_raw: 2026-01-09 09:49:51 status half-configured kali-menu:all 2025.4.3


_raw: 2026-01-09 09:49:50 status installed hicolor-icon-theme:all 0.18-2


_raw:
Selecting previously unselected package flameshot.
(Reading database ...
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 449315 files and directories currently installed.)
Preparing to unpack .../flameshot_12.1.0+ds-4_amd64.deb ...
Unpacking flameshot (12.1.0+ds-4) ...
Selecting previously unselected package grim.
Preparing to unpack .../grim_1.4.0+ds-2+b1_amd64.deb ...
Unpacking grim (1.4.0+ds-2+b1) ...
Setting up flameshot (12.1.0+ds-4) ...
Setting up grim (1.4.0+ds-2+b1) ...
Processing triggers for desktop-file-utils (0.28-1) ...
Processing triggers for hicolor-icon-theme (0.18-2) ...
Processing triggers for man-db (2.13.1-1) ...


_raw: 2026-01-09 09:49:49 status half-configured hicolor-icon-theme:all 0.18-2


_raw: 2026-01-09 09:49:49 trigproc hicolor-icon-theme:all 0.18-2 <none>


_raw: 2026-01-09 09:49:49 status installed desktop-file-utils:amd64 0.28-1


_raw: 2026-01-09 09:49:49 status half-configured desktop-file-utils:amd64 0.28-1


_raw: 2026-01-09 09:49:49 trigproc desktop-file-utils:amd64 0.28-1 <none>


_raw: 2026-01-09 09:49:49 status half-configured flameshot:amd64 12.1.0+ds-4


_raw: 2026-01-09 09:49:49 startup packages configure


_raw: 2026-01-09 09:49:49 status triggers-pending hicolor-icon-theme:all 0.18-2


_raw: 2026-01-09 09:49:49 status triggers-pending desktop-file-utils:amd64 0.28-1


_raw: 2026-01-09 09:49:49 status triggers-pending kali-menu:all 2025.4.3


_raw: 2026-01-09 09:49:49 status half-installed flameshot:amd64 12.1.0+ds-4


_raw:
[20260109-09:49:49] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:49:49] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:49:49] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:49:49] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:49:49] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260109-09:49:49] [ERROR] libxrdp_force_read: header read error
[20260109-09:49:49] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260109-09:49:49] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260109-09:49:49] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260109-09:49:49] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260109-09:49:49] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260109-09:49:49] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260109-09:49:49] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260109-09:49:51] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.105 port 58230
[20260109-09:49:51] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:49:51] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:49:51] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:49:51] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:49:51] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:49:51] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:49:51] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:49:51] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:49:51] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:49:51] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:49:51] [INFO ] Non-TLS connection established from ::ffff:10.0.254.105 port 58230: with security level : high
[20260109-09:49:51] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:49:51] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:49:51] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:49:51] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:49:51] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:49:51] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:49:51] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: [20260109-09:49:49] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.105 port 58229


_raw: 2026-01-09 09:49:47 startup archives unpack


_raw:
Start-Date: 2026-01-09  09:49:47
Commandline: apt install flameshot
Requested-By: pentester (1001)
Install: grim:amd64 (1.4.0+ds-2+b1, automatic), flameshot:amd64 (12.1.0+ds-4)


_raw:
[20260109-09:49:45] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20260109-09:49:45] [INFO ] ++ created session (access granted): username pentester, ip ::ffff:10.0.254.106:57979 - socket: 12
[20260109-09:49:45] [INFO ] starting Xorg session...
[20260109-09:49:45] [INFO ] Starting session: session_pid 228406, display :10.0, width 1668, height 854, bpp 24, client ip ::ffff:10.0.254.106:57979 - socket: 12, user name pentester
[20260109-09:49:45] [INFO ] [session start] (display 10): calling auth_start_session from pid 228406
[20260109-09:49:45] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:49:45] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260109-09:49:45] [INFO ] Starting X server on display 10: /usr/lib/xorg/Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
[20260109-09:49:45] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:49:45] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:49:45] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:49:45] [INFO ] Session started successfully for user pentester on display 10
[20260109-09:49:45] [INFO ] Starting the xrdp channel server for display 10
[20260109-09:49:45] [INFO ] Starting the default window manager on display 10: /etc/xrdp/startwm.sh
[20260109-09:49:45] [INFO ] Session in progress on display 10, waiting until the window manager (pid 228432) exits to end the session


_raw:
[20260109-09:49:45] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:49:45] [INFO ] sesman connect ok
[20260109-09:49:45] [INFO ] sending login info to session manager. Please wait...
[20260109-09:49:45] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260109-09:49:45] [INFO ] login successful for user pentester on display 10
[20260109-09:49:45] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260109-09:49:45] [INFO ] started connecting
[20260109-09:49:45] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260109-09:49:45] [INFO ] lib_mod_log_peer: xrdp_pid=228263 connected to X11rdp_pid=228434 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.106 client_port=57979
[20260109-09:49:45] [INFO ] connected ok


_raw: [20260109-09:49:45] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 60300


_raw:
[20260109-09:49:43] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20260109-09:49:43] [INFO ] ++ created session (access granted): username pentester, ip ::ffff:10.0.254.103:57993 - socket: 12
[20260109-09:49:43] [INFO ] starting Xorg session...
[20260109-09:49:43] [INFO ] Starting session: session_pid 228405, display :10.0, width 1920, height 1080, bpp 24, client ip ::ffff:10.0.254.103:57993 - socket: 12, user name pentester
[20260109-09:49:43] [INFO ] [session start] (display 10): calling auth_start_session from pid 228405
[20260109-09:49:43] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:49:43] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260109-09:49:43] [INFO ] Starting X server on display 10: /usr/lib/xorg/Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
[20260109-09:49:44] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:49:44] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:49:44] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:49:44] [INFO ] Session started successfully for user pentester on display 10
[20260109-09:49:44] [INFO ] Starting the xrdp channel server for display 10
[20260109-09:49:44] [INFO ] Starting the default window manager on display 10: /etc/xrdp/startwm.sh
[20260109-09:49:44] [INFO ] Session in progress on display 10, waiting until the window manager (pid 228432) exits to end the session


_raw:
[20260109-09:49:43] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:49:43] [INFO ] sesman connect ok
[20260109-09:49:43] [INFO ] sending login info to session manager. Please wait...
[20260109-09:49:43] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260109-09:49:43] [INFO ] login successful for user pentester on display 10
[20260109-09:49:43] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260109-09:49:43] [INFO ] started connecting
[20260109-09:49:43] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260109-09:49:43] [INFO ] lib_mod_log_peer: xrdp_pid=228325 connected to X11rdp_pid=228433 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.103 client_port=57993
[20260109-09:49:43] [INFO ] connected ok


_raw: [20260109-09:49:43] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 60460


_raw:
[20260109-09:49:43] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:49:43] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:49:43] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:49:43] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:49:43] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260109-09:49:43] [ERROR] libxrdp_force_read: header read error
[20260109-09:49:43] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260109-09:49:43] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260109-09:49:43] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260109-09:49:43] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260109-09:49:43] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260109-09:49:43] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260109-09:49:43] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260109-09:49:44] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.103 port 58319
[20260109-09:49:44] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:49:44] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:49:44] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:49:44] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:49:44] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:49:44] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:49:44] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:49:44] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:49:44] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:49:44] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:49:44] [INFO ] Non-TLS connection established from ::ffff:10.0.254.103 port 58319: with security level : high
[20260109-09:49:44] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:49:44] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:49:44] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:49:44] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:49:44] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:49:44] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:49:44] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: [20260109-09:49:43] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.103 port 58318


_raw:
[20260109-09:49:38] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20260109-09:49:38] [INFO ] ++ created session (access granted): username pentester, ip ::ffff:10.0.254.101:58278 - socket: 12
[20260109-09:49:38] [INFO ] starting Xorg session...
[20260109-09:49:38] [INFO ] Starting session: session_pid 228446, display :10.0, width 1920, height 1080, bpp 24, client ip ::ffff:10.0.254.101:58278 - socket: 12, user name pentester
[20260109-09:49:38] [INFO ] [session start] (display 10): calling auth_start_session from pid 228446
[20260109-09:49:38] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:49:38] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260109-09:49:38] [INFO ] Starting X server on display 10: /usr/lib/xorg/Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
[20260109-09:49:38] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:49:38] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:49:38] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:49:38] [INFO ] Session started successfully for user pentester on display 10
[20260109-09:49:38] [INFO ] Session in progress on display 10, waiting until the window manager (pid 228473) exits to end the session
[20260109-09:49:38] [INFO ] Starting the xrdp channel server for display 10
[20260109-09:49:38] [INFO ] Starting the default window manager on display 10: /etc/xrdp/startwm.sh


_raw:
[20260109-09:49:38] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:49:38] [INFO ] sesman connect ok
[20260109-09:49:38] [INFO ] sending login info to session manager. Please wait...
[20260109-09:49:38] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260109-09:49:38] [INFO ] login successful for user pentester on display 10
[20260109-09:49:38] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260109-09:49:38] [INFO ] started connecting
[20260109-09:49:38] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260109-09:49:38] [INFO ] lib_mod_log_peer: xrdp_pid=228380 connected to X11rdp_pid=228474 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.101 client_port=58278
[20260109-09:49:38] [INFO ] connected ok


_raw: [20260109-09:49:38] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 42150


_raw:
[20260109-09:49:36] [ERROR] pam_authenticate failed: Authentication failure
[20260109-09:49:36] [INFO ] AUTHFAIL: user=pentester ip=::ffff:10.0.254.102 time=1767970176
[20260109-09:49:36] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:49:36] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans


_raw:
[20260109-09:49:34] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:49:34] [INFO ] sesman connect ok
[20260109-09:49:34] [INFO ] sending login info to session manager. Please wait...
[20260109-09:49:36] [INFO ] xrdp_wm_log_msg: login failed for user pentester
[20260109-09:49:36] [INFO ] login failed for user pentester


_raw: [20260109-09:49:33] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 49696


_raw: Processing triggers for kali-menu (2025.4.3) ...


_raw: 2026-01-09 09:49:26 status half-configured kali-menu:all 2025.4.3


_raw:
[20260109-09:49:25] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20260109-09:49:25] [INFO ] ++ created session (access granted): username pentester, ip ::ffff:10.0.254.105:58189 - socket: 12
[20260109-09:49:25] [INFO ] starting Xorg session...
[20260109-09:49:25] [INFO ] Starting session: session_pid 229232, display :10.0, width 1920, height 1080, bpp 24, client ip ::ffff:10.0.254.105:58189 - socket: 12, user name pentester
[20260109-09:49:25] [INFO ] [session start] (display 10): calling auth_start_session from pid 229232
[20260109-09:49:25] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:49:25] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260109-09:49:26] [INFO ] Starting X server on display 10: /usr/lib/xorg/Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
[20260109-09:49:26] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:49:26] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:49:26] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:49:26] [INFO ] Session started successfully for user pentester on display 10
[20260109-09:49:26] [INFO ] Starting the xrdp channel server for display 10
[20260109-09:49:26] [INFO ] Starting the default window manager on display 10: /etc/xrdp/startwm.sh
[20260109-09:49:26] [INFO ] Session in progress on display 10, waiting until the window manager (pid 229259) exits to end the session


_raw:
[20260109-09:49:25] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:49:25] [INFO ] sesman connect ok
[20260109-09:49:25] [INFO ] sending login info to session manager. Please wait...
[20260109-09:49:25] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260109-09:49:25] [INFO ] login successful for user pentester on display 10
[20260109-09:49:25] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260109-09:49:25] [INFO ] started connecting
[20260109-09:49:25] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260109-09:49:26] [INFO ] lib_mod_log_peer: xrdp_pid=229212 connected to X11rdp_pid=229260 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.105 client_port=58189
[20260109-09:49:26] [INFO ] connected ok


_raw: [20260109-09:49:25] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 44920


_raw: [20260109-09:49:24] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 54982


_raw:
[20260109-09:49:24] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20260109-09:49:24] [INFO ] ++ created session (access granted): username pentester, ip ::ffff:10.0.254.104:57965 - socket: 12
[20260109-09:49:24] [INFO ] starting Xorg session...
[20260109-09:49:24] [INFO ] Starting session: session_pid 228454, display :10.0, width 1920, height 1080, bpp 24, client ip ::ffff:10.0.254.104:57965 - socket: 12, user name pentester
[20260109-09:49:24] [INFO ] [session start] (display 10): calling auth_start_session from pid 228454
[20260109-09:49:24] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:49:24] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260109-09:49:24] [INFO ] Starting X server on display 10: /usr/lib/xorg/Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
[20260109-09:49:25] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:49:25] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:49:25] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:49:25] [INFO ] Session started successfully for user pentester on display 10
[20260109-09:49:25] [INFO ] Starting the xrdp channel server for display 10
[20260109-09:49:25] [INFO ] Starting the default window manager on display 10: /etc/xrdp/startwm.sh
[20260109-09:49:25] [INFO ] Session in progress on display 10, waiting until the window manager (pid 228481) exits to end the session


_raw:
[20260109-09:49:24] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:49:24] [INFO ] sesman connect ok
[20260109-09:49:24] [INFO ] sending login info to session manager. Please wait...
[20260109-09:49:24] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260109-09:49:24] [INFO ] login successful for user pentester on display 10
[20260109-09:49:24] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260109-09:49:24] [INFO ] started connecting
[20260109-09:49:24] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260109-09:49:24] [INFO ] lib_mod_log_peer: xrdp_pid=228405 connected to X11rdp_pid=228482 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.104 client_port=57965
[20260109-09:49:24] [INFO ] connected ok


_raw: 2026-01-09 09:49:22 status half-configured libc-bin:amd64 2.41-12


_raw: 2026-01-09 09:49:22 status installed libintl-xs-perl:amd64 1.35-1


_raw: 2026-01-09 09:49:22 status half-configured libintl-xs-perl:amd64 1.35-1


_raw: 2026-01-09 09:49:22 status unpacked libintl-xs-perl:amd64 1.35-1


_raw:
Setting up libintl-xs-perl (1.35-1) ...
Processing triggers for libc-bin (2.41-12) ...
Processing triggers for man-db (2.13.1-1) ...


_raw:
[20260109-09:49:21] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20260109-09:49:21] [INFO ] ++ created session (access granted): username pentester, ip ::ffff:10.0.254.101:57966 - socket: 12
[20260109-09:49:21] [INFO ] starting Xorg session...
[20260109-09:49:21] [INFO ] Starting session: session_pid 228382, display :10.0, width 1920, height 1080, bpp 24, client ip ::ffff:10.0.254.101:57966 - socket: 12, user name pentester
[20260109-09:49:21] [INFO ] [session start] (display 10): calling auth_start_session from pid 228382
[20260109-09:49:21] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:49:21] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260109-09:49:21] [INFO ] Starting X server on display 10: /usr/lib/xorg/Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
[20260109-09:49:22] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:49:22] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:49:22] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:49:22] [INFO ] Session started successfully for user pentester on display 10
[20260109-09:49:22] [INFO ] Starting the xrdp channel server for display 10
[20260109-09:49:22] [INFO ] Starting the default window manager on display 10: /etc/xrdp/startwm.sh
[20260109-09:49:22] [INFO ] Session in progress on display 10, waiting until the window manager (pid 228409) exits to end the session


_raw:
[20260109-09:49:21] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:49:21] [INFO ] sesman connect ok
[20260109-09:49:21] [INFO ] sending login info to session manager. Please wait...
[20260109-09:49:21] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260109-09:49:21] [INFO ] login successful for user pentester on display 10
[20260109-09:49:21] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260109-09:49:21] [INFO ] started connecting
[20260109-09:49:21] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260109-09:49:21] [INFO ] lib_mod_log_peer: xrdp_pid=228303 connected to X11rdp_pid=228410 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.101 client_port=57966
[20260109-09:49:21] [INFO ] connected ok


_raw: [20260109-09:49:21] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 54762


_raw: 2026-01-09 09:49:20 status half-configured docker.io:amd64 27.5.1+dfsg4-1


_raw: 2026-01-09 09:49:20 status installed python3-pycriu:all 4.2-1


_raw:
Preparing to unpack .../10-libintl-xs-perl_1.35-1_amd64.deb ...
Unpacking libintl-xs-perl (1.35-1) ...
Selecting previously unselected package libmodule-find-perl.
Preparing to unpack .../11-libmodule-find-perl_0.17-1_all.deb ...
Unpacking libmodule-find-perl (0.17-1) ...
Selecting previously unselected package libproc-processtable-perl:amd64.
Preparing to unpack .../12-libproc-processtable-perl_0.637-1_amd64.deb ...
Unpacking libproc-processtable-perl:amd64 (0.637-1) ...
Selecting previously unselected package libsort-naturally-perl.
Preparing to unpack .../13-libsort-naturally-perl_1.03-4_all.deb ...
Unpacking libsort-naturally-perl (1.03-4) ...
Selecting previously unselected package needrestart.
Preparing to unpack .../14-needrestart_3.11-1_all.deb ...
Unpacking needrestart (3.11-1) ...
Selecting previously unselected package python3-protobuf.
Preparing to unpack .../15-python3-protobuf_3.21.12-14_amd64.deb ...
Unpacking python3-protobuf (3.21.12-14) ...
Selecting previously unselected package python3-pycriu.
Preparing to unpack .../16-python3-pycriu_4.2-1_all.deb ...
Unpacking python3-pycriu (4.2-1) ...
Setting up docker-compose (2.32.4-3) ...
Setting up docker-cli (27.5.1+dfsg4-1) ...
Setting up tini-static (0.19.0-6) ...
Setting up runc (1.3.3+ds1-2) ...
Setting up libcompel1:amd64 (4.2-1) ...
Setting up libmodule-find-perl (0.17-1) ...
Setting up libproc-processtable-perl:amd64 (0.637-1) ...
Setting up criu (4.2-1) ...
Setting up libintl-perl (1.35-1) ...
Setting up python3-protobuf (3.21.12-14) ...
Setting up containerd (1.7.24~ds1-10) ...
containerd.service is a disabled or a static unit, not starting it.
Setting up docker-buildx (0.19.3+ds1-4) ...
Setting up libsort-naturally-perl (1.03-4) ...
Setting up needrestart (3.11-1) ...
Setting up python3-pycriu (4.2-1) ...
Setting up docker.io (27.5.1+dfsg4-1) ...
update-rc.d: We have no instructions for the docker init script.
update-rc.d: It looks like a non-network service, we enable it.
Created symlink '/etc/systemd/system/multi-user.target.wants/docker.service' → '/usr/lib/systemd/system/docker.service'.
Created symlink '/etc/systemd/system/sockets.target.wants/docker.socket' → '/usr/lib/systemd/system/docker.socket'.


_raw: 2026-01-09 09:49:19 status half-configured python3-pycriu:all 4.2-1


_raw: 2026-01-09 09:49:19 status unpacked python3-pycriu:all 4.2-1


_raw: 2026-01-09 09:49:19 configure python3-pycriu:all 4.2-1 <none>


_raw: 2026-01-09 09:49:19 status installed needrestart:all 3.11-1


_raw: 2026-01-09 09:49:19 status half-configured needrestart:all 3.11-1


_raw: 2026-01-09 09:49:19 status unpacked needrestart:all 3.11-1


_raw: 2026-01-09 09:49:19 configure needrestart:all 3.11-1 <none>


_raw: 2026-01-09 09:49:19 status installed libsort-naturally-perl:all 1.03-4


_raw: 2026-01-09 09:49:19 status half-configured libsort-naturally-perl:all 1.03-4


_raw: 2026-01-09 09:49:19 status unpacked libsort-naturally-perl:all 1.03-4


_raw: 2026-01-09 09:49:19 configure libsort-naturally-perl:all 1.03-4 <none>


_raw: 2026-01-09 09:49:19 status installed docker-buildx:amd64 0.19.3+ds1-4


_raw: 2026-01-09 09:49:19 status half-configured docker-buildx:amd64 0.19.3+ds1-4


_raw: 2026-01-09 09:49:19 status half-configured containerd:amd64 1.7.24~ds1-10


_raw: 2026-01-09 09:49:19 status half-configured python3-protobuf:amd64 3.21.12-14


_raw: 2026-01-09 09:49:19 status installed libintl-perl:all 1.35-1


_raw: 2026-01-09 09:49:19 status half-configured libintl-perl:all 1.35-1


_raw: 2026-01-09 09:49:19 status unpacked libintl-perl:all 1.35-1


_raw: 2026-01-09 09:49:18 status half-configured criu:amd64 4.2-1


_raw: 2026-01-09 09:49:18 status installed libproc-processtable-perl:amd64 0.637-1


_raw: 2026-01-09 09:49:18 status half-configured libproc-processtable-perl:amd64 0.637-1


_raw: 2026-01-09 09:49:18 status unpacked libproc-processtable-perl:amd64 0.637-1


_raw: 2026-01-09 09:49:18 configure libproc-processtable-perl:amd64 0.637-1 <none>


_raw: 2026-01-09 09:49:18 status installed libmodule-find-perl:all 0.17-1


_raw: 2026-01-09 09:49:18 status half-configured libmodule-find-perl:all 0.17-1


_raw: 2026-01-09 09:49:18 status unpacked libmodule-find-perl:all 0.17-1


_raw: 2026-01-09 09:49:18 configure libmodule-find-perl:all 0.17-1 <none>


_raw: 2026-01-09 09:49:18 status installed libcompel1:amd64 4.2-1


_raw: 2026-01-09 09:49:18 status half-configured libcompel1:amd64 4.2-1


_raw: 2026-01-09 09:49:18 status half-configured tini-static:amd64 0.19.0-6


_raw: 2026-01-09 09:49:18 status half-configured docker-cli:amd64 27.5.1+dfsg4-1


_raw: 2026-01-09 09:49:18 status installed docker-compose:amd64 2.32.4-3


_raw: 2026-01-09 09:49:18 status half-configured docker-compose:amd64 2.32.4-3


_raw: 2026-01-09 09:49:18 status unpacked docker-compose:amd64 2.32.4-3


_raw: 2026-01-09 09:49:18 startup packages configure


_raw: 2026-01-09 09:49:18 status unpacked python3-pycriu:all 4.2-1


_raw: 2026-01-09 09:49:18 status half-installed python3-pycriu:all 4.2-1


_raw: 2026-01-09 09:49:18 status half-installed python3-protobuf:amd64 3.21.12-14


_raw: 2026-01-09 09:49:18 status unpacked needrestart:all 3.11-1


_raw: 2026-01-09 09:49:18 status half-installed needrestart:all 3.11-1


_raw: 2026-01-09 09:49:18 status unpacked libsort-naturally-perl:all 1.03-4


_raw: 2026-01-09 09:49:18 status half-installed libsort-naturally-perl:all 1.03-4


_raw: 2026-01-09 09:49:18 install libsort-naturally-perl:all <none> 1.03-4


_raw: 2026-01-09 09:49:18 status unpacked libproc-processtable-perl:amd64 0.637-1


_raw: 2026-01-09 09:49:18 status half-installed libproc-processtable-perl:amd64 0.637-1


_raw: 2026-01-09 09:49:18 install libproc-processtable-perl:amd64 <none> 0.637-1


_raw: 2026-01-09 09:49:18 status unpacked libmodule-find-perl:all 0.17-1


_raw: 2026-01-09 09:49:18 status half-installed libmodule-find-perl:all 0.17-1


_raw: 2026-01-09 09:49:18 install libmodule-find-perl:all <none> 0.17-1


_raw:
[20260109-09:49:18] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20260109-09:49:18] [INFO ] ++ created session (access granted): username pentester, ip ::ffff:10.0.254.105:57946 - socket: 12
[20260109-09:49:18] [INFO ] starting Xorg session...
[20260109-09:49:18] [INFO ] Starting session: session_pid 228346, display :10.0, width 1920, height 1080, bpp 24, client ip ::ffff:10.0.254.105:57946 - socket: 12, user name pentester
[20260109-09:49:18] [INFO ] [session start] (display 10): calling auth_start_session from pid 228346
[20260109-09:49:18] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:49:18] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260109-09:49:19] [INFO ] Starting X server on display 10: /usr/lib/xorg/Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
[20260109-09:49:19] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:49:19] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:49:19] [INFO ] Session started successfully for user pentester on display 10
[20260109-09:49:19] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:49:19] [INFO ] Starting the xrdp channel server for display 10
[20260109-09:49:19] [INFO ] Session in progress on display 10, waiting until the window manager (pid 228373) exits to end the session
[20260109-09:49:19] [INFO ] Starting the default window manager on display 10: /etc/xrdp/startwm.sh


_raw:
[20260109-09:49:18] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:49:18] [INFO ] sesman connect ok
[20260109-09:49:18] [INFO ] sending login info to session manager. Please wait...
[20260109-09:49:18] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260109-09:49:18] [INFO ] login successful for user pentester on display 10
[20260109-09:49:18] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260109-09:49:18] [INFO ] started connecting
[20260109-09:49:18] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260109-09:49:19] [INFO ] lib_mod_log_peer: xrdp_pid=228216 connected to X11rdp_pid=228374 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.105 client_port=57946
[20260109-09:49:19] [INFO ] connected ok


_raw: [20260109-09:49:18] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 37656


_raw: 2026-01-09 09:49:17 status unpacked libintl-xs-perl:amd64 1.35-1


_raw: 2026-01-09 09:49:17 status half-installed libintl-xs-perl:amd64 1.35-1


_raw: 2026-01-09 09:49:17 status unpacked libintl-perl:all 1.35-1


_raw: 2026-01-09 09:49:17 status half-installed libintl-perl:all 1.35-1


_raw: 2026-01-09 09:49:17 status unpacked docker-compose:amd64 2.32.4-3


_raw: 2026-01-09 09:49:17 status half-installed docker-compose:amd64 2.32.4-3


_raw:
Preparing to unpack .../03-docker.io_27.5.1+dfsg4-1_amd64.deb ...
Unpacking docker.io (27.5.1+dfsg4-1) ...
Selecting previously unselected package libcompel1:amd64.
Preparing to unpack .../04-libcompel1_4.2-1_amd64.deb ...
Unpacking libcompel1:amd64 (4.2-1) ...
Selecting previously unselected package criu.
Preparing to unpack .../05-criu_4.2-1_amd64.deb ...
Unpacking criu (4.2-1) ...
Selecting previously unselected package docker-buildx.
Preparing to unpack .../06-docker-buildx_0.19.3+ds1-4_amd64.deb ...
Unpacking docker-buildx (0.19.3+ds1-4) ...
Selecting previously unselected package docker-cli.
Preparing to unpack .../07-docker-cli_27.5.1+dfsg4-1_amd64.deb ...
Unpacking docker-cli (27.5.1+dfsg4-1) ...
Selecting previously unselected package docker-compose.
Preparing to unpack .../08-docker-compose_2.32.4-3_amd64.deb ...
Unpacking docker-compose (2.32.4-3) ...
Selecting previously unselected package libintl-perl.
Preparing to unpack .../09-libintl-perl_1.35-1_all.deb ...
Unpacking libintl-perl (1.35-1) ...
Selecting previously unselected package libintl-xs-perl.


_raw: 2026-01-09 09:49:16 status half-installed docker-cli:amd64 27.5.1+dfsg4-1


_raw: 2026-01-09 09:49:16 status half-installed docker-buildx:amd64 0.19.3+ds1-4


_raw: 2026-01-09 09:49:15 status half-installed libcompel1:amd64 4.2-1


_raw: 2026-01-09 09:49:15 status triggers-pending libc-bin:amd64 2.41-12


_raw: 2026-01-09 09:49:15 status half-installed docker.io:amd64 27.5.1+dfsg4-1


_raw:
Selecting previously unselected package runc.
(Reading database ...
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 449315 files and directories currently installed.)
Preparing to unpack .../00-runc_1.3.3+ds1-2_amd64.deb ...
Unpacking runc (1.3.3+ds1-2) ...
Selecting previously unselected package containerd.
Preparing to unpack .../01-containerd_1.7.24~ds1-10_amd64.deb ...
Unpacking containerd (1.7.24~ds1-10) ...
Selecting previously unselected package tini-static.
Preparing to unpack .../02-tini-static_0.19.0-6_amd64.deb ...
Unpacking tini-static (0.19.0-6) ...
Selecting previously unselected package docker.io.


_raw: 2026-01-09 09:49:14 status half-installed tini-static:amd64 0.19.0-6


_raw: 2026-01-09 09:49:14 status half-installed containerd:amd64 1.7.24~ds1-10


_raw:
[20260109-09:49:13] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20260109-09:49:13] [INFO ] ++ created session (access granted): username pentester, ip ::ffff:10.0.254.101:58399 - socket: 12
[20260109-09:49:13] [INFO ] starting Xorg session...
[20260109-09:49:13] [INFO ] Starting session: session_pid 229201, display :10.0, width 1920, height 1080, bpp 24, client ip ::ffff:10.0.254.101:58399 - socket: 12, user name pentester
[20260109-09:49:13] [INFO ] [session start] (display 10): calling auth_start_session from pid 229201
[20260109-09:49:13] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:49:13] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260109-09:49:13] [INFO ] Starting X server on display 10: /usr/lib/xorg/Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
[20260109-09:49:13] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:49:13] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:49:13] [INFO ] Session started successfully for user pentester on display 10
[20260109-09:49:13] [INFO ] Session in progress on display 10, waiting until the window manager (pid 229228) exits to end the session
[20260109-09:49:13] [INFO ] Starting the xrdp channel server for display 10
[20260109-09:49:13] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:49:13] [INFO ] Starting the default window manager on display 10: /etc/xrdp/startwm.sh


_raw:
[20260109-09:49:13] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:49:13] [INFO ] sesman connect ok
[20260109-09:49:13] [INFO ] sending login info to session manager. Please wait...
[20260109-09:49:13] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260109-09:49:13] [INFO ] login successful for user pentester on display 10
[20260109-09:49:13] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260109-09:49:13] [INFO ] started connecting
[20260109-09:49:13] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260109-09:49:13] [INFO ] lib_mod_log_peer: xrdp_pid=229136 connected to X11rdp_pid=229229 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.101 client_port=58399
[20260109-09:49:13] [INFO ] connected ok


_raw: 2026-01-09 09:49:13 status triggers-pending kali-menu:all 2025.4.3


_raw: [20260109-09:49:12] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 48190


_raw: 2026-01-09 09:49:12 startup archives unpack


_raw:
Start-Date: 2026-01-09  09:49:12
Commandline: /usr/bin/apt install docker.io docker-compose -y
Requested-By: pentester (1001)
Install: docker-compose:amd64 (2.32.4-3), libintl-perl:amd64 (1.35-1, automatic), containerd:amd64 (1.7.24~ds1-10, automatic), libcompel1:amd64 (4.2-1, automatic), docker-cli:amd64 (27.5.1+dfsg4-1, automatic), python3-pycriu:amd64 (4.2-1, automatic), docker.io:amd64 (27.5.1+dfsg4-1), libsort-naturally-perl:amd64 (1.03-4, automatic), docker-buildx:amd64 (0.19.3+ds1-4, automatic), libmodule-find-perl:amd64 (0.17-1, automatic), runc:amd64 (1.3.3+ds1-2, automatic), python3-protobuf:amd64 (3.21.12-14, automatic), criu:amd64 (4.2-1, automatic), needrestart:amd64 (3.11-1, automatic), tini-static:amd64 (0.19.0-6, automatic), libintl-xs-perl:amd64 (1.35-1, automatic), libproc-processtable-perl:amd64 (0.637-1, automatic)


_raw: Processing triggers for kali-menu (2025.4.3) ...


_raw: 2026-01-09 09:49:12 status half-configured kali-menu:all 2025.4.3


_raw: 2026-01-09 09:49:10 status half-configured libc-bin:amd64 2.41-12


_raw:
Unpacking gcc-mingw-w64-x86-64 (15.2.0-7+28) ...
Selecting previously unselected package gcc-mingw-w64.
Preparing to unpack .../16-gcc-mingw-w64_15.2.0-7+28_all.deb ...
Unpacking gcc-mingw-w64 (15.2.0-7+28) ...
Selecting previously unselected package mingw-w64.
Preparing to unpack .../17-mingw-w64_13.0.0-1_all.deb ...
Unpacking mingw-w64 (13.0.0-1) ...
Selecting previously unselected package sliver.
Preparing to unpack .../18-sliver_1.5.42-0kali1_amd64.deb ...
Unpacking sliver (1.5.42-0kali1) ...
Setting up g++-mingw-w64-i686-win32 (15.2.0-7+28) ...
update-alternatives: using /usr/bin/i686-w64-mingw32-g++-win32 to provide /usr/bin/i686-w64-mingw32-g++ (i686-w64-mingw32-g++) in auto mode
Setting up g++-mingw-w64-x86-64-win32 (15.2.0-7+28) ...
update-alternatives: using /usr/bin/x86_64-w64-mingw32-g++-win32 to provide /usr/bin/x86_64-w64-mingw32-g++ (x86_64-w64-mingw32-g++) in auto mode
Setting up gcc-mingw-w64-x86-64-posix-runtime (15.2.0-7+28) ...
Setting up gcc-mingw-w64-x86-64-posix (15.2.0-7+28) ...
Setting up gcc-mingw-w64-i686-posix-runtime (15.2.0-7+28) ...
Setting up gcc-mingw-w64-x86-64 (15.2.0-7+28) ...
Setting up binutils-mingw-w64-ucrt64 (2.45-7+12.1) ...
Setting up asciinema (2.4.0-1) ...
Setting up sliver (1.5.42-0kali1) ...
Setting up gcc-mingw-w64-i686-posix (15.2.0-7+28) ...
Setting up g++-mingw-w64-x86-64-posix (15.2.0-7+28) ...
Setting up gcc-mingw-w64-i686 (15.2.0-7+28) ...
Setting up g++-mingw-w64-x86-64 (15.2.0-7+28) ...
Setting up binutils-mingw-w64 (2.45-7+12.1) ...
Setting up gcc-mingw-w64 (15.2.0-7+28) ...
Setting up g++-mingw-w64-i686-posix (15.2.0-7+28) ...
Setting up g++-mingw-w64-i686 (15.2.0-7+28) ...
Setting up g++-mingw-w64 (15.2.0-7+28) ...
Setting up mingw-w64 (13.0.0-1) ...
Processing triggers for libc-bin (2.41-12) ...
Processing triggers for man-db (2.13.1-1) ...


_raw: 2026-01-09 09:49:09 status half-configured binutils-mingw-w64:all 2.45-7+12.1


_raw: 2026-01-09 09:49:09 status half-configured sliver:amd64 1.5.42-0kali1


_raw: 2026-01-09 09:49:09 status installed asciinema:all 2.4.0-1


_raw: 2026-01-09 09:49:09 status half-configured asciinema:all 2.4.0-1


_raw: 2026-01-09 09:49:09 status unpacked asciinema:all 2.4.0-1


_raw: 2026-01-09 09:49:09 status half-configured binutils-mingw-w64-ucrt64:amd64 2.45-7+12.1


_raw: 2026-01-09 09:49:09 status half-configured gcc-mingw-w64-i686-posix-runtime:amd64 15.2.0-7+28


_raw: 2026-01-09 09:49:09 status half-configured gcc-mingw-w64-x86-64-posix-runtime:amd64 15.2.0-7+28


_raw: 2026-01-09 09:49:09 startup packages configure


_raw: update-alternatives 2026-01-09 09:49:09: run with --install /usr/bin/i686-w64-mingw32-g++ i686-w64-mingw32-g++ /usr/bin/i686-w64-mingw32-g++-posix 30 --slave /usr/bin/i686-w64-mingw32-c++ i686-w64-mingw32-c++ /usr/bin/i686-w64-mingw32-c++-posix


_raw: update-alternatives 2026-01-09 09:49:09: run with --install /usr/bin/i686-w64-mingw32-gcc i686-w64-mingw32-gcc /usr/bin/i686-w64-mingw32-gcc-posix 30 --slave /usr/bin/i686-w64-mingw32-cpp i686-w64-mingw32-cpp /usr/bin/i686-w64-mingw32-cpp-posix --slave /usr/bin/i686-w64-mingw32-gcc-15 i686-w64-mingw32-gcc-15 /usr/bin/i686-w64-mingw32-gcc-15-posix --slave /usr/bin/i686-w64-mingw32-gcc-ar i686-w64-mingw32-gcc-ar /usr/bin/i686-w64-mingw32-gcc-ar-posix --slave /usr/bin/i686-w64-mingw32-gcc-nm i686-w64-mingw32-gcc-nm /usr/bin/i686-w64-mingw32-gcc-nm-posix --slave /usr/bin/i686-w64-mingw32-gcc-ranlib i686-w64-mingw32-gcc-ranlib /usr/bin/i686-w64-mingw32-gcc-ranlib-posix --slave /usr/bin/i686-w64-mingw32-gcov i686-w64-mingw32-gcov /usr/bin/i686-w64-mingw32-gcov-posix --slave /usr/bin/i686-w64-mingw32-gcov-dump i686-w64-mingw32-gcov-dump /usr/bin/i686-w64-mingw32-gcov-dump-posix --slave /usr/bin/i686-w64-mingw32-gcov-tool i686-w64-mingw32-gcov-tool /usr/bin/i686-w64-mingw32-gcov-tool-posix


_raw: update-alternatives 2026-01-09 09:49:09: run with --install /usr/bin/x86_64-w64-mingw32-gcc x86_64-w64-mingw32-gcc /usr/bin/x86_64-w64-mingw32-gcc-posix 30 --slave /usr/bin/x86_64-w64-mingw32-cpp x86_64-w64-mingw32-cpp /usr/bin/x86_64-w64-mingw32-cpp-posix --slave /usr/bin/x86_64-w64-mingw32-gcc-15 x86_64-w64-mingw32-gcc-15 /usr/bin/x86_64-w64-mingw32-gcc-15-posix --slave /usr/bin/x86_64-w64-mingw32-gcc-ar x86_64-w64-mingw32-gcc-ar /usr/bin/x86_64-w64-mingw32-gcc-ar-posix --slave /usr/bin/x86_64-w64-mingw32-gcc-nm x86_64-w64-mingw32-gcc-nm /usr/bin/x86_64-w64-mingw32-gcc-nm-posix --slave /usr/bin/x86_64-w64-mingw32-gcc-ranlib x86_64-w64-mingw32-gcc-ranlib /usr/bin/x86_64-w64-mingw32-gcc-ranlib-posix --slave /usr/bin/x86_64-w64-mingw32-gcov x86_64-w64-mingw32-gcov /usr/bin/x86_64-w64-mingw32-gcov-posix --slave /usr/bin/x86_64-w64-mingw32-gcov-dump x86_64-w64-mingw32-gcov-dump /usr/bin/x86_64-w64-mingw32-gcov-dump-posix --slave /usr/bin/x86_64-w64-mingw32-gcov-tool x86_64-w64-mingw32-gcov-tool /usr/bin/x86_64-w64-mingw32-gcov-tool-posix


_raw: update-alternatives 2026-01-09 09:49:09: link group x86_64-w64-mingw32-g++ updated to point to /usr/bin/x86_64-w64-mingw32-g++-win32


_raw: update-alternatives 2026-01-09 09:49:09: link group i686-w64-mingw32-g++ updated to point to /usr/bin/i686-w64-mingw32-g++-win32


_raw: 2026-01-09 09:49:08 status half-installed sliver:amd64 1.5.42-0kali1


_raw:
Selecting previously unselected package g++-mingw-w64-x86-64-posix.
Preparing to unpack .../10-g++-mingw-w64-x86-64-posix_15.2.0-7+28_amd64.deb ...
Unpacking g++-mingw-w64-x86-64-posix (15.2.0-7+28) ...
Selecting previously unselected package g++-mingw-w64-x86-64-win32.
Preparing to unpack .../11-g++-mingw-w64-x86-64-win32_15.2.0-7+28_amd64.deb ...
Unpacking g++-mingw-w64-x86-64-win32 (15.2.0-7+28) ...
Selecting previously unselected package g++-mingw-w64-x86-64.
Preparing to unpack .../12-g++-mingw-w64-x86-64_15.2.0-7+28_all.deb ...
Unpacking g++-mingw-w64-x86-64 (15.2.0-7+28) ...
Selecting previously unselected package g++-mingw-w64.
Preparing to unpack .../13-g++-mingw-w64_15.2.0-7+28_all.deb ...
Unpacking g++-mingw-w64 (15.2.0-7+28) ...
Selecting previously unselected package gcc-mingw-w64-i686.
Preparing to unpack .../14-gcc-mingw-w64-i686_15.2.0-7+28_all.deb ...
Unpacking gcc-mingw-w64-i686 (15.2.0-7+28) ...
Selecting previously unselected package gcc-mingw-w64-x86-64.
Preparing to unpack .../15-gcc-mingw-w64-x86-64_15.2.0-7+28_all.deb ...


_raw:
[20260109-09:49:06] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:49:06] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:49:06] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:49:06] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:49:06] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260109-09:49:06] [ERROR] libxrdp_force_read: header read error
[20260109-09:49:06] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260109-09:49:06] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260109-09:49:06] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260109-09:49:06] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260109-09:49:06] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260109-09:49:06] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260109-09:49:06] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260109-09:49:07] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.105 port 58189
[20260109-09:49:07] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:49:07] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:49:07] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:49:07] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:49:07] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:49:07] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:49:07] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:49:07] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:49:07] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:49:07] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:49:07] [INFO ] Non-TLS connection established from ::ffff:10.0.254.105 port 58189: with security level : high
[20260109-09:49:07] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:49:07] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:49:07] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:49:07] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:49:07] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:49:07] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:49:07] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: [20260109-09:49:06] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.105 port 58188


_raw:
[20260109-09:49:05] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:49:05] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:49:05] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:49:05] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:49:05] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:49:05] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:49:05] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:49:05] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:49:05] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:49:05] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:49:05] [INFO ] Non-TLS connection established from ::ffff:10.0.254.101 port 58278: with security level : high
[20260109-09:49:05] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:49:05] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:49:05] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:49:05] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:49:05] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:49:05] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:49:05] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw:
Selecting previously unselected package g++-mingw-w64-i686-posix.
Preparing to unpack .../05-g++-mingw-w64-i686-posix_15.2.0-7+28_amd64.deb ...
Unpacking g++-mingw-w64-i686-posix (15.2.0-7+28) ...
Selecting previously unselected package g++-mingw-w64-i686-win32.
Preparing to unpack .../06-g++-mingw-w64-i686-win32_15.2.0-7+28_amd64.deb ...
Unpacking g++-mingw-w64-i686-win32 (15.2.0-7+28) ...
Selecting previously unselected package g++-mingw-w64-i686.
Preparing to unpack .../07-g++-mingw-w64-i686_15.2.0-7+28_all.deb ...
Unpacking g++-mingw-w64-i686 (15.2.0-7+28) ...
Selecting previously unselected package gcc-mingw-w64-x86-64-posix-runtime.
Preparing to unpack .../08-gcc-mingw-w64-x86-64-posix-runtime_15.2.0-7+28_amd64.deb ...
Unpacking gcc-mingw-w64-x86-64-posix-runtime (15.2.0-7+28) ...
Selecting previously unselected package gcc-mingw-w64-x86-64-posix.
Preparing to unpack .../09-gcc-mingw-w64-x86-64-posix_15.2.0-7+28_amd64.deb ...
Unpacking gcc-mingw-w64-x86-64-posix (15.2.0-7+28) ...


_raw:
[20260109-09:49:02] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:49:02] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:49:02] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:49:02] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:49:02] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260109-09:49:02] [ERROR] libxrdp_force_read: header read error
[20260109-09:49:02] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260109-09:49:02] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260109-09:49:02] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260109-09:49:02] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260109-09:49:02] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260109-09:49:02] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260109-09:49:02] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260109-09:49:05] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.101 port 58278


_raw: [20260109-09:49:02] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.101 port 58277


_raw: (lightdm-gtk-greeter:934): Gtk-WARNING **: 09:49:01.005: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw:
[20260109-09:49:01] [ERROR] pam_authenticate failed: Authentication failure
[20260109-09:49:01] [INFO ] AUTHFAIL: user=pentester ip=::ffff:10.0.254.106 time=1767970141
[20260109-09:49:01] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:49:01] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans


_raw: 2026-01-09 09:49:01 status triggers-pending libc-bin:amd64 2.41-12


_raw:
Selecting previously unselected package asciinema.
(Reading database ...
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 449315 files and directories currently installed.)
Preparing to unpack .../00-asciinema_2.4.0-1_all.deb ...
Unpacking asciinema (2.4.0-1) ...
Selecting previously unselected package binutils-mingw-w64-ucrt64.
Preparing to unpack .../01-binutils-mingw-w64-ucrt64_2.45-7+12.1_amd64.deb ...
Unpacking binutils-mingw-w64-ucrt64 (2.45-7+12.1) ...
Selecting previously unselected package binutils-mingw-w64.
Preparing to unpack .../02-binutils-mingw-w64_2.45-7+12.1_all.deb ...
Unpacking binutils-mingw-w64 (2.45-7+12.1) ...
Selecting previously unselected package gcc-mingw-w64-i686-posix-runtime.
Preparing to unpack .../03-gcc-mingw-w64-i686-posix-runtime_15.2.0-7+28_amd64.deb ...
Unpacking gcc-mingw-w64-i686-posix-runtime (15.2.0-7+28) ...
Selecting previously unselected package gcc-mingw-w64-i686-posix.
Preparing to unpack .../04-gcc-mingw-w64-i686-posix_15.2.0-7+28_amd64.deb ...
Unpacking gcc-mingw-w64-i686-posix (15.2.0-7+28) ...


_raw: (lightdm-gtk-greeter:934): Gtk-WARNING **: 09:49:00.979: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:49:00.964: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:968): Gtk-WARNING **: 09:49:00.959: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:945): Gtk-WARNING **: 09:49:00.954: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1158): Gtk-WARNING **: 09:49:00.916: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:959): Gtk-WARNING **: 09:49:00.914: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:49:00.899: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1153): Gtk-WARNING **: 09:49:00.885: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1149): Gtk-WARNING **: 09:49:00.884: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:946): Gtk-WARNING **: 09:49:00.882: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:49:00.868: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:49:00.867: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:49:00.850: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:49:00.788: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:49:00.777: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:49:00.766: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:49:00.755: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:49:00.737: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:49:00.702: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:934): Gtk-WARNING **: 09:49:00.694: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:49:00.694: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:49:00.663: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1319): Gtk-WARNING **: 09:49:00.655: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:938): Gtk-WARNING **: 09:49:00.651: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:49:00.624: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:944): Gtk-WARNING **: 09:49:00.620: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:49:00.614: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:932): Gtk-WARNING **: 09:49:00.602: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:941): Gtk-WARNING **: 09:49:00.532: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:961): Gtk-WARNING **: 09:49:00.493: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:944): Gtk-WARNING **: 09:49:00.482: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:49:00.482: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:961): Gtk-WARNING **: 09:49:00.464: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:969): Gtk-WARNING **: 09:49:00.460: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:49:00.439: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:49:00.435: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:938): Gtk-WARNING **: 09:49:00.425: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:49:00.422: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:49:00.397: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:948): Gtk-WARNING **: 09:49:00.376: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1165): Gtk-WARNING **: 09:49:00.375: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:49:00.365: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:49:00.361: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:944): Gtk-WARNING **: 09:49:00.360: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:933): Gtk-WARNING **: 09:49:00.360: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:938): Gtk-WARNING **: 09:49:00.355: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:49:00.335: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:949): Gtk-WARNING **: 09:49:00.311: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:49:00.311: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:49:00.309: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:49:00.305: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:49:00.293: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:49:00.285: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:946): Gtk-WARNING **: 09:49:00.282: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:944): Gtk-WARNING **: 09:49:00.266: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:49:00.265: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:49:00.265: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:946): Gtk-WARNING **: 09:49:00.265: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:948): Gtk-WARNING **: 09:49:00.228: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:49:00.223: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:49:00.209: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:49:00.206: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:946): Gtk-WARNING **: 09:49:00.185: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:932): Gtk-WARNING **: 09:49:00.178: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:49:00.172: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:49:00.162: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:49:00.162: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:49:00.158: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:941): Gtk-WARNING **: 09:49:00.148: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:952): Gtk-WARNING **: 09:49:00.139: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:49:00.136: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:49:00.134: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:928): Gtk-WARNING **: 09:49:00.114: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1044): Gtk-WARNING **: 09:49:00.086: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1151): Gtk-WARNING **: 09:49:00.081: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:49:00.078: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:938): Gtk-WARNING **: 09:49:00.017: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: 2026-01-09 09:49:00 status half-installed gcc-mingw-w64-i686-posix-runtime:amd64 15.2.0-7+28


_raw: 2026-01-09 09:49:00 status half-installed binutils-mingw-w64:all 2.45-7+12.1


_raw: 2026-01-09 09:49:00 status half-installed binutils-mingw-w64-ucrt64:amd64 2.45-7+12.1


_raw: 2026-01-09 09:49:00 status unpacked asciinema:all 2.4.0-1


_raw: 2026-01-09 09:49:00 status triggers-pending kali-menu:all 2025.4.3


_raw: 2026-01-09 09:49:00 status half-installed asciinema:all 2.4.0-1


_raw: [20260109-09:48:58] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 39258


_raw:
[20260109-09:48:58] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:48:58] [INFO ] sesman connect ok
[20260109-09:48:58] [INFO ] sending login info to session manager. Please wait...
[20260109-09:49:01] [INFO ] xrdp_wm_log_msg: login failed for user pentester
[20260109-09:49:01] [INFO ] login failed for user pentester


_raw: [20260109-09:48:58] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 50066


_raw: 2026-01-09 09:48:58 startup archives unpack


_raw:
[20260109-09:48:58] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20260109-09:48:58] [INFO ] ++ created session (access granted): username pentester, ip ::ffff:10.0.254.104:58021 - socket: 12
[20260109-09:48:58] [INFO ] starting Xorg session...
[20260109-09:48:58] [INFO ] Starting session: session_pid 228363, display :10.0, width 1920, height 1080, bpp 24, client ip ::ffff:10.0.254.104:58021 - socket: 12, user name pentester
[20260109-09:48:58] [INFO ] [session start] (display 10): calling auth_start_session from pid 228363
[20260109-09:48:58] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:48:58] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260109-09:48:58] [INFO ] Starting X server on display 10: /usr/lib/xorg/Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
[20260109-09:48:58] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:48:58] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:48:58] [INFO ] Session started successfully for user pentester on display 10
[20260109-09:48:58] [INFO ] Session in progress on display 10, waiting until the window manager (pid 228390) exits to end the session
[20260109-09:48:58] [INFO ] Starting the xrdp channel server for display 10
[20260109-09:48:58] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:48:58] [INFO ] Starting the default window manager on display 10: /etc/xrdp/startwm.sh


_raw:
[20260109-09:48:58] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:48:58] [INFO ] sesman connect ok
[20260109-09:48:58] [INFO ] sending login info to session manager. Please wait...
[20260109-09:48:58] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260109-09:48:58] [INFO ] login successful for user pentester on display 10
[20260109-09:48:58] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260109-09:48:58] [INFO ] started connecting
[20260109-09:48:58] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260109-09:48:58] [INFO ] lib_mod_log_peer: xrdp_pid=228223 connected to X11rdp_pid=228391 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.104 client_port=58021
[20260109-09:48:58] [INFO ] connected ok


_raw:
[20260109-09:48:56] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20260109-09:48:56] [INFO ] ++ created session (access granted): username pentester, ip ::ffff:10.0.254.106:58024 - socket: 12
[20260109-09:48:56] [INFO ] starting Xorg session...
[20260109-09:48:56] [INFO ] Starting session: session_pid 228308, display :10.0, width 1920, height 1080, bpp 24, client ip ::ffff:10.0.254.106:58024 - socket: 12, user name pentester
[20260109-09:48:56] [INFO ] [session start] (display 10): calling auth_start_session from pid 228308
[20260109-09:48:56] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:48:56] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260109-09:48:56] [INFO ] Starting X server on display 10: /usr/lib/xorg/Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
[20260109-09:48:57] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:48:57] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:48:57] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:48:57] [INFO ] Session started successfully for user pentester on display 10
[20260109-09:48:57] [INFO ] Starting the xrdp channel server for display 10
[20260109-09:48:57] [INFO ] Starting the default window manager on display 10: /etc/xrdp/startwm.sh
[20260109-09:48:57] [INFO ] Session in progress on display 10, waiting until the window manager (pid 228335) exits to end the session


_raw:
[20260109-09:48:56] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:48:56] [INFO ] sesman connect ok
[20260109-09:48:56] [INFO ] sending login info to session manager. Please wait...
[20260109-09:48:56] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260109-09:48:56] [INFO ] login successful for user pentester on display 10
[20260109-09:48:56] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260109-09:48:56] [INFO ] started connecting
[20260109-09:48:56] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260109-09:48:56] [INFO ] lib_mod_log_peer: xrdp_pid=228259 connected to X11rdp_pid=228336 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.106 client_port=58024
[20260109-09:48:56] [INFO ] connected ok


_raw: [20260109-09:48:56] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 41648


_raw:
[20260109-09:48:55] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.104 port 57965
[20260109-09:48:55] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:48:55] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:48:55] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:48:55] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:48:55] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:48:55] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:48:55] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:48:55] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:48:55] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:48:55] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:48:55] [INFO ] Non-TLS connection established from ::ffff:10.0.254.104 port 57965: with security level : high
[20260109-09:48:55] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:48:55] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:48:55] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:48:55] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:48:55] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:48:55] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:48:55] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file