_raw:
Selecting previously unselected package seclists.
(Reading database ...
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 449424 files and directories currently installed.)
Preparing to unpack .../seclists_2025.3-0kali1_all.deb ...
Unpacking seclists (2025.3-0kali1) ...


_raw: 2026-01-09 09:47:31 startup archives unpack


_raw:
Start-Date: 2026-01-09  09:47:31
Commandline: apt install seclists -y
Install: seclists:amd64 (2025.3-0kali1)


_raw:
[20260109-09:47:29] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:47:29] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:47:29] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:47:29] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:47:29] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260109-09:47:29] [ERROR] libxrdp_force_read: header read error
[20260109-09:47:29] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260109-09:47:29] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260109-09:47:29] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260109-09:47:29] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260109-09:47:29] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260109-09:47:29] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260109-09:47:29] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260109-09:47:31] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.104 port 58058
[20260109-09:47:31] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:47:31] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:47:31] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:47:31] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:47:31] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:47:31] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:47:31] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:47:31] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:47:31] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:47:31] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:47:31] [INFO ] Non-TLS connection established from ::ffff:10.0.254.104 port 58058: with security level : high
[20260109-09:47:31] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:47:31] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:47:31] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:47:31] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:47:31] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:47:31] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:47:31] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: [20260109-09:47:29] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.104 port 58057


_raw: Processing triggers for kali-menu (2025.4.3) ...

_sourcetype: term

sourcetype: term


_raw: 2026-01-09 09:47:26 status half-configured kali-menu:all 2025.4.3


_raw: 2026-01-09 09:47:25 status half-configured kali-menu:all 2025.4.3


_raw: 2026-01-09 09:47:24 status installed hicolor-icon-theme:all 0.18-2


_raw: 2026-01-09 09:47:24 status half-configured hicolor-icon-theme:all 0.18-2


_raw: 2026-01-09 09:47:24 trigproc hicolor-icon-theme:all 0.18-2 <none>


_raw: 2026-01-09 09:47:24 status installed desktop-file-utils:amd64 0.28-1


_raw: 2026-01-09 09:47:24 status half-configured desktop-file-utils:amd64 0.28-1


_raw: 2026-01-09 09:47:24 trigproc desktop-file-utils:amd64 0.28-1 <none>


_raw: 2026-01-09 09:47:24 status installed terminator:all 2.1.5-1


_raw:
Selecting previously unselected package gir1.2-keybinder-3.0.
(Reading database ...
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 449315 files and directories currently installed.)
Preparing to unpack .../gir1.2-keybinder-3.0_0.3.2-1.1+b3_amd64.deb ...
Unpacking gir1.2-keybinder-3.0 (0.3.2-1.1+b3) ...
Selecting previously unselected package terminator.
Preparing to unpack .../terminator_2.1.5-1_all.deb ...
Unpacking terminator (2.1.5-1) ...
Setting up gir1.2-keybinder-3.0 (0.3.2-1.1+b3) ...
Setting up terminator (2.1.5-1) ...
Processing triggers for desktop-file-utils (0.28-1) ...
Processing triggers for hicolor-icon-theme (0.18-2) ...
Processing triggers for man-db (2.13.1-1) ...


_raw:
[20260109-09:47:23] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:47:23] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:47:23] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:47:23] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:47:23] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260109-09:47:23] [ERROR] libxrdp_force_read: header read error
[20260109-09:47:23] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260109-09:47:23] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260109-09:47:23] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260109-09:47:23] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260109-09:47:23] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260109-09:47:23] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260109-09:47:23] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260109-09:47:24] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.104 port 58021
[20260109-09:47:24] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:47:24] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:47:24] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:47:24] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:47:24] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:47:24] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:47:24] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:47:24] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:47:24] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:47:24] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:47:24] [INFO ] Non-TLS connection established from ::ffff:10.0.254.104 port 58021: with security level : high
[20260109-09:47:24] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:47:24] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:47:24] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:47:24] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:47:24] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:47:24] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:47:24] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: [20260109-09:47:23] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.104 port 58020


_raw: 2026-01-09 09:47:23 status installed hicolor-icon-theme:all 0.18-2


_raw: 2026-01-09 09:47:23 status half-configured hicolor-icon-theme:all 0.18-2


_raw: 2026-01-09 09:47:23 trigproc hicolor-icon-theme:all 0.18-2 <none>


_raw: 2026-01-09 09:47:23 status installed desktop-file-utils:amd64 0.28-1


_raw: 2026-01-09 09:47:23 status half-configured desktop-file-utils:amd64 0.28-1


_raw: 2026-01-09 09:47:23 trigproc desktop-file-utils:amd64 0.28-1 <none>


_raw: 2026-01-09 09:47:23 status half-configured flameshot:amd64 12.1.0+ds-4


_raw: 2026-01-09 09:47:23 startup packages configure


_raw:
Selecting previously unselected package flameshot.
(Reading database ...
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 449358 files and directories currently installed.)
Preparing to unpack .../flameshot_12.1.0+ds-4_amd64.deb ...
Unpacking flameshot (12.1.0+ds-4) ...
Selecting previously unselected package grim.
Preparing to unpack .../grim_1.4.0+ds-2+b1_amd64.deb ...
Unpacking grim (1.4.0+ds-2+b1) ...
Setting up flameshot (12.1.0+ds-4) ...
Setting up grim (1.4.0+ds-2+b1) ...
Processing triggers for desktop-file-utils (0.28-1) ...
Processing triggers for hicolor-icon-theme (0.18-2) ...
Processing triggers for man-db (2.13.1-1) ...


_raw: 2026-01-09 09:47:23 status triggers-pending hicolor-icon-theme:all 0.18-2


_raw: 2026-01-09 09:47:23 status triggers-pending desktop-file-utils:amd64 0.28-1


_raw: 2026-01-09 09:47:23 status triggers-pending kali-menu:all 2025.4.3


_raw: 2026-01-09 09:47:23 status half-installed flameshot:amd64 12.1.0+ds-4


_raw:
Processing triggers for kali-menu (2025.4.3) ...
Processing triggers for desktop-file-utils (0.28-1) ...
Processing triggers for hicolor-icon-theme (0.18-2) ...
Processing triggers for libc-bin (2.41-12) ...


_raw: 2026-01-09 09:47:23 startup archives unpack


_raw: update-alternatives 2026-01-09 09:47:23: run with --install /usr/bin/x-terminal-emulator x-terminal-emulator /usr/bin/terminator 50 --slave /usr/share/man/man1/x-terminal-emulator.1.gz x-terminal-emulator.1.gz /usr/share/man/man1/terminator.1.gz


_raw: 2026-01-09 09:47:23 status unpacked terminator:all 2.1.5-1


_raw: 2026-01-09 09:47:23 status half-installed terminator:all 2.1.5-1


_raw: 2026-01-09 09:47:23 status half-configured terminator:all 2.1.5-1


_raw: 2026-01-09 09:47:22 status half-configured libc-bin:amd64 2.41-12


_raw: 2026-01-09 09:47:22 status installed hicolor-icon-theme:all 0.18-2


_raw: 2026-01-09 09:47:22 status half-configured hicolor-icon-theme:all 0.18-2


_raw: 2026-01-09 09:47:22 trigproc hicolor-icon-theme:all 0.18-2 <none>


_raw: 2026-01-09 09:47:22 status installed desktop-file-utils:amd64 0.28-1


_raw: 2026-01-09 09:47:22 status half-configured desktop-file-utils:amd64 0.28-1


_raw: 2026-01-09 09:47:22 trigproc desktop-file-utils:amd64 0.28-1 <none>


_raw: 2026-01-09 09:47:22 status half-configured kali-menu:all 2025.4.3


_raw: 2026-01-09 09:47:22 status installed shared-mime-info:amd64 2.4-5+b3


_raw:
Start-Date: 2026-01-09  09:47:22
Commandline: apt install flameshot -y
Install: grim:amd64 (1.4.0+ds-2+b1, automatic), flameshot:amd64 (12.1.0+ds-4)


_raw: 2026-01-09 09:47:22 startup archives unpack


_raw:
Start-Date: 2026-01-09  09:47:22
Commandline: apt install terminator
Requested-By: pentester (1001)
Install: terminator:amd64 (2.1.5-1), gir1.2-keybinder-3.0:amd64 (0.3.2-1.1+b3, automatic)


_raw: 2026-01-09 09:47:19 status half-configured shared-mime-info:amd64 2.4-5+b3


_raw: Processing triggers for shared-mime-info (2.4-5+b3) ...


_raw: 2026-01-09 09:47:15 status installed remmina-plugin-secret:amd64 1.4.40+dfsg-2


_raw: 2026-01-09 09:47:15 status half-configured remmina-plugin-secret:amd64 1.4.40+dfsg-2


_raw: 2026-01-09 09:47:15 status unpacked remmina-plugin-secret:amd64 1.4.40+dfsg-2


_raw: 2026-01-09 09:47:15 configure remmina-plugin-secret:amd64 1.4.40+dfsg-2 <none>


_raw: 2026-01-09 09:47:15 status installed remmina-plugin-vnc:amd64 1.4.40+dfsg-2


_raw: 2026-01-09 09:47:15 status half-configured remmina-plugin-vnc:amd64 1.4.40+dfsg-2


_raw: 2026-01-09 09:47:15 status unpacked remmina-plugin-vnc:amd64 1.4.40+dfsg-2


_raw: 2026-01-09 09:47:15 configure remmina-plugin-vnc:amd64 1.4.40+dfsg-2 <none>


_raw: 2026-01-09 09:47:15 status installed remmina-plugin-rdp:amd64 1.4.40+dfsg-2


_raw: 2026-01-09 09:47:15 status half-configured remmina-plugin-rdp:amd64 1.4.40+dfsg-2


_raw: 2026-01-09 09:47:15 status unpacked remmina-plugin-rdp:amd64 1.4.40+dfsg-2


_raw: 2026-01-09 09:47:15 configure remmina-plugin-rdp:amd64 1.4.40+dfsg-2 <none>


_raw: 2026-01-09 09:47:15 status half-configured remmina:amd64 1.4.40+dfsg-2


_raw: 2026-01-09 09:47:15 status half-configured libavahi-ui-gtk3-0:amd64 0.8-17


_raw: 2026-01-09 09:47:15 status half-configured libptytty0:amd64 2.0-1+b2


_raw: 2026-01-09 09:47:15 status installed krb5-config:all 2.7


_raw: 2026-01-09 09:47:15 status half-configured krb5-config:all 2.7


_raw: 2026-01-09 09:47:15 status unpacked krb5-config:all 2.7


_raw: 2026-01-09 09:47:15 status installed libvncclient1:amd64 0.9.15+dfsg-2


_raw: 2026-01-09 09:47:15 status half-configured libvncclient1:amd64 0.9.15+dfsg-2


_raw: 2026-01-09 09:47:15 status unpacked libvncclient1:amd64 0.9.15+dfsg-2


_raw: 2026-01-09 09:47:15 status installed remmina-common:all 1.4.40+dfsg-2


_raw: 2026-01-09 09:47:15 status half-configured remmina-common:all 1.4.40+dfsg-2


_raw: 2026-01-09 09:47:15 status unpacked remmina-common:all 1.4.40+dfsg-2


_raw: 2026-01-09 09:47:15 configure remmina-common:all 1.4.40+dfsg-2 <none>


_raw: 2026-01-09 09:47:15 startup packages configure


_raw:
Preparing to unpack .../08-remmina-plugin-secret_1.4.40+dfsg-2_amd64.deb ...
Unpacking remmina-plugin-secret:amd64 (1.4.40+dfsg-2) ...
Selecting previously unselected package remmina-plugin-vnc:amd64.
Preparing to unpack .../09-remmina-plugin-vnc_1.4.40+dfsg-2_amd64.deb ...
Unpacking remmina-plugin-vnc:amd64 (1.4.40+dfsg-2) ...
Selecting previously unselected package rlwrap.
Preparing to unpack .../10-rlwrap_0.47.1-0.1_amd64.deb ...
Unpacking rlwrap (0.47.1-0.1) ...
Setting up remmina-common (1.4.40+dfsg-2) ...
Setting up libvncclient1:amd64 (0.9.15+dfsg-2) ...
Setting up krb5-config (2.7) ...
Setting up krb5-user (1.22.1-2) ...
update-alternatives: using /usr/bin/kinit.mit to provide /usr/bin/kinit (kinit) in auto mode
update-alternatives: using /usr/bin/klist.mit to provide /usr/bin/klist (klist) in auto mode
update-alternatives: using /usr/bin/kswitch.mit to provide /usr/bin/kswitch (kswitch) in auto mode
update-alternatives: using /usr/bin/ksu.mit to provide /usr/bin/ksu (ksu) in auto mode
update-alternatives: using /usr/bin/kpasswd.mit to provide /usr/bin/kpasswd (kpasswd) in auto mode
update-alternatives: using /usr/bin/kdestroy.mit to provide /usr/bin/kdestroy (kdestroy) in auto mode
update-alternatives: using /usr/bin/kadmin.mit to provide /usr/bin/kadmin (kadmin) in auto mode
update-alternatives: using /usr/bin/ktutil.mit to provide /usr/bin/ktutil (ktutil) in auto mode
Setting up libptytty0:amd64 (2.0-1+b2) ...
Setting up libavahi-ui-gtk3-0:amd64 (0.8-17) ...
Setting up remmina (1.4.40+dfsg-2) ...
Setting up rlwrap (0.47.1-0.1) ...
update-alternatives: using /usr/bin/rlwrap to provide /usr/bin/readline-editor (readline-editor) in auto mode
Setting up remmina-plugin-rdp:amd64 (1.4.40+dfsg-2) ...
Setting up remmina-plugin-vnc:amd64 (1.4.40+dfsg-2) ...
Setting up remmina-plugin-secret:amd64 (1.4.40+dfsg-2) ...
Processing triggers for man-db (2.13.1-1) ...


_raw: update-alternatives 2026-01-09 09:47:15: link group readline-editor updated to point to /usr/bin/rlwrap


_raw: update-alternatives 2026-01-09 09:47:15: run with --install /usr/bin/readline-editor readline-editor /usr/bin/rlwrap 60 --slave /usr/share/man/man1/readline-editor.1.gz readline-editor.1.gz /usr/share/man/man1/rlwrap.1.gz


_raw: update-alternatives 2026-01-09 09:47:15: link group ktutil updated to point to /usr/bin/ktutil.mit


_raw: update-alternatives 2026-01-09 09:47:15: run with --install /usr/bin/ktutil ktutil /usr/bin/ktutil.mit 30 --slave /usr/share/man/man1/ktutil.1.gz ktutil.1.gz /usr/share/man/man1/ktutil.mit.1.gz


_raw: update-alternatives 2026-01-09 09:47:15: link group kadmin updated to point to /usr/bin/kadmin.mit


_raw: update-alternatives 2026-01-09 09:47:15: run with --install /usr/bin/kadmin kadmin /usr/bin/kadmin.mit 30 --slave /usr/share/man/man1/kadmin.1.gz kadmin.1.gz /usr/share/man/man1/kadmin.mit.1.gz


_raw: update-alternatives 2026-01-09 09:47:15: link group kdestroy updated to point to /usr/bin/kdestroy.mit


_raw: update-alternatives 2026-01-09 09:47:15: run with --install /usr/bin/kdestroy kdestroy /usr/bin/kdestroy.mit 30 --slave /usr/share/man/man1/kdestroy.1.gz kdestroy.1.gz /usr/share/man/man1/kdestroy.mit.1.gz


_raw: update-alternatives 2026-01-09 09:47:15: link group kpasswd updated to point to /usr/bin/kpasswd.mit


_raw: update-alternatives 2026-01-09 09:47:15: run with --install /usr/bin/kpasswd kpasswd /usr/bin/kpasswd.mit 30 --slave /usr/share/man/man1/kpasswd.1.gz kpasswd.1.gz /usr/share/man/man1/kpasswd.mit.1.gz


_raw: update-alternatives 2026-01-09 09:47:15: link group ksu updated to point to /usr/bin/ksu.mit


_raw: update-alternatives 2026-01-09 09:47:15: run with --install /usr/bin/ksu ksu /usr/bin/ksu.mit 30 --slave /usr/share/man/man1/ksu.1.gz ksu.1.gz /usr/share/man/man1/ksu.mit.1.gz


_raw: update-alternatives 2026-01-09 09:47:15: link group kswitch updated to point to /usr/bin/kswitch.mit


_raw: update-alternatives 2026-01-09 09:47:15: run with --install /usr/bin/kswitch kswitch /usr/bin/kswitch.mit 30 --slave /usr/share/man/man1/kswitch.1.gz kswitch.1.gz /usr/share/man/man1/kswitch.mit.1.gz


_raw: update-alternatives 2026-01-09 09:47:15: link group klist updated to point to /usr/bin/klist.mit


_raw: update-alternatives 2026-01-09 09:47:15: run with --install /usr/bin/klist klist /usr/bin/klist.mit 30 --slave /usr/share/man/man1/klist.1.gz klist.1.gz /usr/share/man/man1/klist.mit.1.gz


_raw: update-alternatives 2026-01-09 09:47:15: link group kinit updated to point to /usr/bin/kinit.mit


_raw: update-alternatives 2026-01-09 09:47:15: run with --install /usr/bin/kinit kinit /usr/bin/kinit.mit 30 --slave /usr/share/man/man1/kinit.1.gz kinit.1.gz /usr/share/man/man1/kinit.mit.1.gz


_raw:
[20260109-09:47:15] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20260109-09:47:15] [INFO ] ++ created session (access granted): username pentester, ip ::ffff:10.0.254.102:58014 - socket: 12
[20260109-09:47:15] [INFO ] starting Xorg session...
[20260109-09:47:15] [INFO ] Starting session: session_pid 228146, display :10.0, width 1920, height 1080, bpp 24, client ip ::ffff:10.0.254.102:58014 - socket: 12, user name pentester
[20260109-09:47:15] [INFO ] [session start] (display 10): calling auth_start_session from pid 228146
[20260109-09:47:15] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:47:15] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260109-09:47:15] [INFO ] Starting X server on display 10: /usr/lib/xorg/Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
[20260109-09:47:15] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:47:15] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:47:15] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:47:15] [INFO ] Session started successfully for user pentester on display 10
[20260109-09:47:15] [INFO ] Session in progress on display 10, waiting until the window manager (pid 228173) exits to end the session
[20260109-09:47:15] [INFO ] Starting the xrdp channel server for display 10
[20260109-09:47:15] [INFO ] Starting the default window manager on display 10: /etc/xrdp/startwm.sh


_raw:
[20260109-09:47:15] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:47:15] [INFO ] sesman connect ok
[20260109-09:47:15] [INFO ] sending login info to session manager. Please wait...
[20260109-09:47:15] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260109-09:47:15] [INFO ] login successful for user pentester on display 10
[20260109-09:47:15] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260109-09:47:15] [INFO ] started connecting
[20260109-09:47:15] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260109-09:47:15] [INFO ] lib_mod_log_peer: xrdp_pid=228066 connected to X11rdp_pid=228174 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.102 client_port=58014
[20260109-09:47:15] [INFO ] connected ok


_raw: 2026-01-09 09:47:14 status unpacked remmina-plugin-vnc:amd64 1.4.40+dfsg-2


_raw: 2026-01-09 09:47:14 status half-installed remmina-plugin-vnc:amd64 1.4.40+dfsg-2


_raw: 2026-01-09 09:47:14 install remmina-plugin-vnc:amd64 <none> 1.4.40+dfsg-2


_raw: 2026-01-09 09:47:14 status unpacked remmina-plugin-secret:amd64 1.4.40+dfsg-2


_raw: 2026-01-09 09:47:14 status half-installed remmina-plugin-secret:amd64 1.4.40+dfsg-2


_raw: 2026-01-09 09:47:14 install remmina-plugin-secret:amd64 <none> 1.4.40+dfsg-2


_raw: 2026-01-09 09:47:14 status unpacked remmina-plugin-rdp:amd64 1.4.40+dfsg-2


_raw: 2026-01-09 09:47:14 status half-installed remmina-plugin-rdp:amd64 1.4.40+dfsg-2


_raw: 2026-01-09 09:47:14 install remmina-plugin-rdp:amd64 <none> 1.4.40+dfsg-2


_raw: 2026-01-09 09:47:14 status triggers-pending shared-mime-info:amd64 2.4-5+b3


_raw: 2026-01-09 09:47:14 status triggers-pending desktop-file-utils:amd64 0.28-1


_raw: 2026-01-09 09:47:14 status half-installed remmina:amd64 1.4.40+dfsg-2


_raw: 2026-01-09 09:47:14 status unpacked remmina-common:all 1.4.40+dfsg-2


_raw:
Selecting previously unselected package krb5-config.
(Reading database ...
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 449315 files and directories currently installed.)
Preparing to unpack .../00-krb5-config_2.7_all.deb ...
Unpacking krb5-config (2.7) ...
Selecting previously unselected package krb5-user.
Preparing to unpack .../01-krb5-user_1.22.1-2_amd64.deb ...
Unpacking krb5-user (1.22.1-2) ...
Selecting previously unselected package libavahi-ui-gtk3-0:amd64.
Preparing to unpack .../02-libavahi-ui-gtk3-0_0.8-17_amd64.deb ...
Unpacking libavahi-ui-gtk3-0:amd64 (0.8-17) ...
Selecting previously unselected package libptytty0:amd64.
Preparing to unpack .../03-libptytty0_2.0-1+b2_amd64.deb ...
Unpacking libptytty0:amd64 (2.0-1+b2) ...
Selecting previously unselected package libvncclient1:amd64.
Preparing to unpack .../04-libvncclient1_0.9.15+dfsg-2_amd64.deb ...
Unpacking libvncclient1:amd64 (0.9.15+dfsg-2) ...
Selecting previously unselected package remmina-common.
Preparing to unpack .../05-remmina-common_1.4.40+dfsg-2_all.deb ...
Unpacking remmina-common (1.4.40+dfsg-2) ...
Selecting previously unselected package remmina.
Preparing to unpack .../06-remmina_1.4.40+dfsg-2_amd64.deb ...
Unpacking remmina (1.4.40+dfsg-2) ...
Selecting previously unselected package remmina-plugin-rdp:amd64.
Preparing to unpack .../07-remmina-plugin-rdp_1.4.40+dfsg-2_amd64.deb ...
Unpacking remmina-plugin-rdp:amd64 (1.4.40+dfsg-2) ...
Selecting previously unselected package remmina-plugin-secret:amd64.


_raw: [20260109-09:47:14] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 42802


_raw: 2026-01-09 09:47:13 status triggers-pending hicolor-icon-theme:all 0.18-2


_raw: 2026-01-09 09:47:13 status half-installed remmina-common:all 1.4.40+dfsg-2


_raw: 2026-01-09 09:47:13 install remmina-common:all <none> 1.4.40+dfsg-2


_raw: 2026-01-09 09:47:13 status unpacked libvncclient1:amd64 0.9.15+dfsg-2


_raw: 2026-01-09 09:47:13 status half-installed libvncclient1:amd64 0.9.15+dfsg-2


_raw: 2026-01-09 09:47:13 status half-installed libptytty0:amd64 2.0-1+b2


_raw: 2026-01-09 09:47:13 status half-installed libavahi-ui-gtk3-0:amd64 0.8-17


_raw: 2026-01-09 09:47:13 status triggers-pending libc-bin:amd64 2.41-12


_raw: 2026-01-09 09:47:13 status triggers-pending kali-menu:all 2025.4.3


_raw: 2026-01-09 09:47:13 status unpacked krb5-config:all 2.7


_raw: 2026-01-09 09:47:13 status half-installed krb5-config:all 2.7


_raw:
[20260109-09:47:12] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:47:12] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:47:12] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:47:12] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:47:12] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260109-09:47:12] [ERROR] libxrdp_force_read: header read error
[20260109-09:47:12] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260109-09:47:12] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260109-09:47:12] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260109-09:47:12] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260109-09:47:12] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260109-09:47:12] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260109-09:47:12] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260109-09:47:14] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.105 port 58050
[20260109-09:47:14] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:47:14] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:47:14] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:47:14] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:47:14] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:47:14] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:47:14] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:47:14] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:47:14] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:47:14] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:47:14] [INFO ] Non-TLS connection established from ::ffff:10.0.254.105 port 58050: with security level : high
[20260109-09:47:14] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:47:14] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:47:14] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:47:14] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:47:14] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:47:14] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:47:14] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: [20260109-09:47:12] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.105 port 58049


_raw: 2026-01-09 09:47:11 startup archives unpack


_raw:
Start-Date: 2026-01-09  09:47:11
Commandline: apt install -y ldap-utils gobuster remmina rlwrap krb5-user libkrb5-dev
Requested-By: pentester (1001)
Install: krb5-user:amd64 (1.22.1-2), rlwrap:amd64 (0.47.1-0.1), libptytty0:amd64 (2.0-1+b2, automatic), remmina-plugin-rdp:amd64 (1.4.40+dfsg-2, automatic), remmina-plugin-vnc:amd64 (1.4.40+dfsg-2, automatic), remmina-plugin-secret:amd64 (1.4.40+dfsg-2, automatic), remmina:amd64 (1.4.40+dfsg-2), libavahi-ui-gtk3-0:amd64 (0.8-17, automatic), libvncclient1:amd64 (0.9.15+dfsg-2, automatic), krb5-config:amd64 (2.7, automatic), remmina-common:amd64 (1.4.40+dfsg-2, automatic)


_raw:
[20260109-09:47:08] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20260109-09:47:08] [INFO ] ++ created session (access granted): username pentester, ip ::ffff:10.0.254.103:58023 - socket: 12
[20260109-09:47:08] [INFO ] starting Xorg session...
[20260109-09:47:08] [INFO ] [session start] (display 10): calling auth_start_session from pid 228154
[20260109-09:47:08] [INFO ] Starting session: session_pid 228154, display :10.0, width 1920, height 1080, bpp 24, client ip ::ffff:10.0.254.103:58023 - socket: 12, user name pentester
[20260109-09:47:08] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:47:08] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260109-09:47:08] [INFO ] Starting X server on display 10: /usr/lib/xorg/Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
[20260109-09:47:08] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:47:08] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:47:08] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:47:08] [INFO ] Session started successfully for user pentester on display 10
[20260109-09:47:08] [INFO ] Starting the xrdp channel server for display 10
[20260109-09:47:08] [INFO ] Starting the default window manager on display 10: /etc/xrdp/startwm.sh
[20260109-09:47:08] [INFO ] Session in progress on display 10, waiting until the window manager (pid 228181) exits to end the session


_raw:
[20260109-09:47:08] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:47:08] [INFO ] sesman connect ok
[20260109-09:47:08] [INFO ] sending login info to session manager. Please wait...
[20260109-09:47:08] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260109-09:47:08] [INFO ] login successful for user pentester on display 10
[20260109-09:47:08] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260109-09:47:08] [INFO ] started connecting
[20260109-09:47:08] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260109-09:47:08] [INFO ] lib_mod_log_peer: xrdp_pid=228088 connected to X11rdp_pid=228182 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.103 client_port=58023
[20260109-09:47:08] [INFO ] connected ok


_raw:
[20260109-09:47:08] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20260109-09:47:08] [INFO ] ++ created session (access granted): username pentester, ip ::ffff:10.0.254.105:58011 - socket: 12
[20260109-09:47:08] [INFO ] starting Xorg session...
[20260109-09:47:08] [INFO ] Starting session: session_pid 228110, display :10.0, width 1920, height 1080, bpp 24, client ip ::ffff:10.0.254.105:58011 - socket: 12, user name pentester
[20260109-09:47:08] [INFO ] [session start] (display 10): calling auth_start_session from pid 228110
[20260109-09:47:08] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:47:08] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260109-09:47:09] [INFO ] Starting X server on display 10: /usr/lib/xorg/Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
[20260109-09:47:09] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:47:09] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:47:09] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:47:09] [INFO ] Session started successfully for user pentester on display 10
[20260109-09:47:09] [INFO ] Starting the xrdp channel server for display 10
[20260109-09:47:09] [INFO ] Starting the default window manager on display 10: /etc/xrdp/startwm.sh
[20260109-09:47:09] [INFO ] Session in progress on display 10, waiting until the window manager (pid 228137) exits to end the session


_raw:
[20260109-09:47:08] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:47:08] [INFO ] sesman connect ok
[20260109-09:47:08] [INFO ] sending login info to session manager. Please wait...
[20260109-09:47:08] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260109-09:47:08] [INFO ] login successful for user pentester on display 10
[20260109-09:47:08] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260109-09:47:08] [INFO ] started connecting
[20260109-09:47:08] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260109-09:47:09] [INFO ] lib_mod_log_peer: xrdp_pid=228041 connected to X11rdp_pid=228138 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.105 client_port=58011
[20260109-09:47:09] [INFO ] connected ok


_raw: [20260109-09:47:08] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 54136


_raw:
[20260109-09:47:07] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.105 port 58177
[20260109-09:47:07] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:47:07] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:47:07] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:47:07] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:47:07] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:47:07] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:47:07] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:47:07] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:47:07] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:47:07] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:47:07] [INFO ] Non-TLS connection established from ::ffff:10.0.254.105 port 58177: with security level : high
[20260109-09:47:07] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:47:07] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:47:07] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:47:07] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:47:07] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:47:07] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:47:07] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: [20260109-09:47:07] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 53654


_raw:
[20260109-09:47:05] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.105 port 58176
[20260109-09:47:05] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:47:05] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:47:05] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:47:05] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:47:05] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260109-09:47:05] [ERROR] libxrdp_force_read: header read error
[20260109-09:47:05] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260109-09:47:05] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260109-09:47:05] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260109-09:47:05] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260109-09:47:05] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260109-09:47:05] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260109-09:47:05] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed


_raw:
[20260109-09:47:05] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20260109-09:47:05] [INFO ] ++ created session (access granted): username pentester, ip ::ffff:10.0.254.101:58019 - socket: 12
[20260109-09:47:05] [INFO ] starting Xorg session...
[20260109-09:47:05] [INFO ] Starting session: session_pid 228360, display :10.0, width 1920, height 1080, bpp 24, client ip ::ffff:10.0.254.101:58019 - socket: 12, user name pentester
[20260109-09:47:05] [INFO ] [session start] (display 10): calling auth_start_session from pid 228360
[20260109-09:47:05] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:47:05] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260109-09:47:05] [INFO ] Starting X server on display 10: /usr/lib/xorg/Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
[20260109-09:47:05] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:47:05] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:47:05] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:47:05] [INFO ] Session started successfully for user pentester on display 10
[20260109-09:47:05] [INFO ] Starting the xrdp channel server for display 10
[20260109-09:47:05] [INFO ] Starting the default window manager on display 10: /etc/xrdp/startwm.sh
[20260109-09:47:05] [INFO ] Session in progress on display 10, waiting until the window manager (pid 228387) exits to end the session


_raw:
[20260109-09:47:05] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:47:05] [INFO ] sesman connect ok
[20260109-09:47:05] [INFO ] sending login info to session manager. Please wait...
[20260109-09:47:05] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260109-09:47:05] [INFO ] login successful for user pentester on display 10
[20260109-09:47:05] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260109-09:47:05] [INFO ] started connecting
[20260109-09:47:05] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260109-09:47:05] [INFO ] lib_mod_log_peer: xrdp_pid=228265 connected to X11rdp_pid=228388 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.101 client_port=58019
[20260109-09:47:05] [INFO ] connected ok


_raw: [20260109-09:47:05] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 55446


_raw:
[20260109-09:47:05] [ERROR] pam_authenticate failed: Authentication failure
[20260109-09:47:05] [INFO ] AUTHFAIL: user=pentester ip=::ffff:10.0.254.104 time=1767970025
[20260109-09:47:05] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:47:05] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans


_raw:
Setting up enum4linux-ng (1.3.7-0kali1) ...
Processing triggers for kali-menu (2025.4.3) ...


_raw: 2026-01-09 09:47:05 status half-configured kali-menu:all 2025.4.3


_raw: 2026-01-09 09:47:05 status installed enum4linux-ng:all 1.3.7-0kali1


_raw: 2026-01-09 09:47:05 status half-configured enum4linux-ng:all 1.3.7-0kali1


_raw: 2026-01-09 09:47:05 status unpacked enum4linux-ng:all 1.3.7-0kali1


_raw: 2026-01-09 09:47:05 configure enum4linux-ng:all 1.3.7-0kali1 <none>


_raw: 2026-01-09 09:47:05 startup packages configure


_raw:
Start-Date: 2026-01-09  09:47:05
Commandline: apt install enum4linux-ng -y
Install: enum4linux-ng:amd64 (1.3.7-0kali1)


_raw:
Log started: 2026-01-09  09:47:05
Selecting previously unselected package enum4linux-ng.
(Reading database ...
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 449348 files and directories currently installed.)
Preparing to unpack .../enum4linux-ng_1.3.7-0kali1_all.deb ...
Unpacking enum4linux-ng (1.3.7-0kali1) ...


_raw: 2026-01-09 09:47:05 status triggers-pending kali-menu:all 2025.4.3


_raw: 2026-01-09 09:47:05 status half-installed enum4linux-ng:all 1.3.7-0kali1


_raw: 2026-01-09 09:47:05 startup archives unpack


_raw:
[20260109-09:47:03] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:47:03] [INFO ] sesman connect ok
[20260109-09:47:03] [INFO ] sending login info to session manager. Please wait...
[20260109-09:47:05] [INFO ] xrdp_wm_log_msg: login failed for user pentester
[20260109-09:47:05] [INFO ] login failed for user pentester


_raw: [20260109-09:47:03] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 42634


_raw:
Selecting previously unselected package bloodhound-ce-python.
(Reading database ...
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 449315 files and directories currently installed.)
Preparing to unpack .../bloodhound-ce-python_1.9.1-0kali1_all.deb ...
Unpacking bloodhound-ce-python (1.9.1-0kali1) ...
Setting up bloodhound-ce-python (1.9.1-0kali1) ...
Processing triggers for kali-menu (2025.4.3) ...


_raw: 2026-01-09 09:47:02 status half-configured kali-menu:all 2025.4.3


_raw: 2026-01-09 09:47:02 status installed bloodhound-ce-python:all 1.9.1-0kali1


_raw: 2026-01-09 09:47:02 status half-configured bloodhound-ce-python:all 1.9.1-0kali1


_raw: 2026-01-09 09:47:02 status unpacked bloodhound-ce-python:all 1.9.1-0kali1


_raw: 2026-01-09 09:47:02 configure bloodhound-ce-python:all 1.9.1-0kali1 <none>


_raw: 2026-01-09 09:47:02 startup packages configure


_raw: 2026-01-09 09:47:02 status triggers-pending kali-menu:all 2025.4.3


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:47:01.006: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw:
[20260109-09:47:01] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:47:01] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:47:01] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:47:01] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:47:01] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:47:01] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:47:01] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:47:01] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:47:01] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:47:01] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:47:01] [INFO ] Non-TLS connection established from ::ffff:10.0.254.104 port 58392: with security level : high
[20260109-09:47:01] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:47:01] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:47:01] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:47:01] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:47:01] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:47:01] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:47:01] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: 2026-01-09 09:47:01 status half-installed bloodhound-ce-python:all 1.9.1-0kali1


_raw: 2026-01-09 09:47:01 install bloodhound-ce-python:all <none> 1.9.1-0kali1


_raw: (lightdm-gtk-greeter:928): Gtk-WARNING **: 09:47:00.985: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1044): Gtk-WARNING **: 09:47:00.969: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:47:00.965: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1151): Gtk-WARNING **: 09:47:00.953: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:938): Gtk-WARNING **: 09:47:00.903: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:934): Gtk-WARNING **: 09:47:00.885: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:934): Gtk-WARNING **: 09:47:00.852: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:47:00.843: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:968): Gtk-WARNING **: 09:47:00.842: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:945): Gtk-WARNING **: 09:47:00.827: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:959): Gtk-WARNING **: 09:47:00.790: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1158): Gtk-WARNING **: 09:47:00.788: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:47:00.779: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1153): Gtk-WARNING **: 09:47:00.761: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:946): Gtk-WARNING **: 09:47:00.760: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1149): Gtk-WARNING **: 09:47:00.759: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:47:00.743: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:47:00.738: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:47:00.727: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:47:00.658: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:47:00.642: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:47:00.638: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:47:00.627: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:47:00.606: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:934): Gtk-WARNING **: 09:47:00.600: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:47:00.582: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:47:00.571: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:47:00.539: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:938): Gtk-WARNING **: 09:47:00.526: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1319): Gtk-WARNING **: 09:47:00.525: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:47:00.523: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:47:00.498: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:944): Gtk-WARNING **: 09:47:00.498: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:932): Gtk-WARNING **: 09:47:00.477: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:941): Gtk-WARNING **: 09:47:00.407: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:961): Gtk-WARNING **: 09:47:00.363: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:47:00.357: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:944): Gtk-WARNING **: 09:47:00.353: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:961): Gtk-WARNING **: 09:47:00.340: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:969): Gtk-WARNING **: 09:47:00.335: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:47:00.316: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:47:00.303: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:47:00.299: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:938): Gtk-WARNING **: 09:47:00.296: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:47:00.277: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:948): Gtk-WARNING **: 09:47:00.273: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1165): Gtk-WARNING **: 09:47:00.250: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:47:00.242: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:933): Gtk-WARNING **: 09:47:00.241: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:47:00.235: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:938): Gtk-WARNING **: 09:47:00.235: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:944): Gtk-WARNING **: 09:47:00.235: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:47:00.213: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:47:00.191: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:47:00.191: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:949): Gtk-WARNING **: 09:47:00.186: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:47:00.185: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:47:00.168: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:47:00.158: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:946): Gtk-WARNING **: 09:47:00.158: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:47:00.146: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:944): Gtk-WARNING **: 09:47:00.143: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:946): Gtk-WARNING **: 09:47:00.140: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:47:00.137: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:948): Gtk-WARNING **: 09:47:00.107: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:47:00.096: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:47:00.089: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:47:00.082: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:946): Gtk-WARNING **: 09:47:00.061: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:47:00.053: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:47:00.052: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:932): Gtk-WARNING **: 09:47:00.048: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:47:00.036: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:941): Gtk-WARNING **: 09:47:00.026: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:47:00.026: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:47:00.014: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:952): Gtk-WARNING **: 09:47:00.009: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw:
[20260109-09:47:00] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20260109-09:47:00] [INFO ] ++ created session (access granted): username pentester, ip ::ffff:10.0.254.104:57945 - socket: 12
[20260109-09:47:00] [INFO ] starting Xorg session...
[20260109-09:47:00] [INFO ] Starting session: session_pid 228092, display :10.0, width 1920, height 1080, bpp 24, client ip ::ffff:10.0.254.104:57945 - socket: 12, user name pentester
[20260109-09:47:00] [INFO ] [session start] (display 10): calling auth_start_session from pid 228092
[20260109-09:47:00] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:47:00] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260109-09:47:00] [INFO ] Starting X server on display 10: /usr/lib/xorg/Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
[20260109-09:47:00] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:47:00] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:47:00] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:47:00] [INFO ] Session started successfully for user pentester on display 10
[20260109-09:47:00] [INFO ] Starting the xrdp channel server for display 10
[20260109-09:47:00] [INFO ] Starting the default window manager on display 10: /etc/xrdp/startwm.sh
[20260109-09:47:00] [INFO ] Session in progress on display 10, waiting until the window manager (pid 228119) exits to end the session


_raw:
[20260109-09:47:00] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:47:00] [INFO ] sesman connect ok
[20260109-09:47:00] [INFO ] sending login info to session manager. Please wait...
[20260109-09:47:00] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260109-09:47:00] [INFO ] login successful for user pentester on display 10
[20260109-09:47:00] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260109-09:47:00] [INFO ] started connecting
[20260109-09:47:00] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260109-09:47:00] [INFO ] lib_mod_log_peer: xrdp_pid=227796 connected to X11rdp_pid=228120 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.104 client_port=57945
[20260109-09:47:00] [INFO ] connected ok


_raw: [20260109-09:47:00] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 50254


_raw: 2026-01-09 09:47:00 startup archives unpack


_raw:
Start-Date: 2026-01-09  09:47:00
Commandline: apt install bloodhound-ce-python -y
Install: bloodhound-ce-python:amd64 (1.9.1-0kali1)


_raw:
[20260109-09:46:59] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20260109-09:46:59] [INFO ] ++ created session (access granted): username pentester, ip ::ffff:10.0.254.106:58046 - socket: 12
[20260109-09:46:59] [INFO ] starting Xorg session...
[20260109-09:46:59] [INFO ] Starting session: session_pid 228351, display :10.0, width 1920, height 1080, bpp 24, client ip ::ffff:10.0.254.106:58046 - socket: 12, user name pentester
[20260109-09:46:59] [INFO ] [session start] (display 10): calling auth_start_session from pid 228351
[20260109-09:46:59] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:46:59] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260109-09:46:59] [INFO ] Starting X server on display 10: /usr/lib/xorg/Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
[20260109-09:46:59] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:46:59] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:46:59] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:46:59] [INFO ] Session started successfully for user pentester on display 10
[20260109-09:46:59] [INFO ] Session in progress on display 10, waiting until the window manager (pid 228378) exits to end the session
[20260109-09:46:59] [INFO ] Starting the xrdp channel server for display 10
[20260109-09:46:59] [INFO ] Starting the default window manager on display 10: /etc/xrdp/startwm.sh


_raw:
[20260109-09:46:59] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:46:59] [INFO ] sesman connect ok
[20260109-09:46:59] [INFO ] sending login info to session manager. Please wait...
[20260109-09:46:59] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260109-09:46:59] [INFO ] login successful for user pentester on display 10
[20260109-09:46:59] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260109-09:46:59] [INFO ] started connecting
[20260109-09:46:59] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260109-09:46:59] [INFO ] lib_mod_log_peer: xrdp_pid=228317 connected to X11rdp_pid=228379 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.106 client_port=58046
[20260109-09:46:59] [INFO ] connected ok


_raw: [20260109-09:46:59] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 38032


_raw:
[20260109-09:46:58] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:46:58] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:46:58] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:46:58] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:46:58] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260109-09:46:58] [ERROR] libxrdp_force_read: header read error
[20260109-09:46:58] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260109-09:46:58] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260109-09:46:58] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260109-09:46:58] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260109-09:46:58] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260109-09:46:58] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260109-09:46:58] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260109-09:47:01] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.104 port 58392


_raw: [20260109-09:46:58] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.104 port 58390


_raw:
[20260109-09:46:49] [ERROR] pam_authenticate failed: Authentication failure
[20260109-09:46:49] [INFO ] AUTHFAIL: user=pentester ip=::ffff:10.0.254.105 time=1767970009
[20260109-09:46:49] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:46:49] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans


_raw:
[20260109-09:46:47] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:46:47] [INFO ] sesman connect ok
[20260109-09:46:47] [INFO ] sending login info to session manager. Please wait...
[20260109-09:46:49] [INFO ] xrdp_wm_log_msg: login failed for user pentester
[20260109-09:46:49] [INFO ] login failed for user pentester


_raw: [20260109-09:46:47] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 47544


_raw:
[20260109-09:46:42] [ERROR] pam_authenticate failed: Authentication failure
[20260109-09:46:42] [INFO ] AUTHFAIL: user=pentester ip=::ffff:10.0.254.104 time=1767970002
[20260109-09:46:42] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:46:42] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans


_raw:
[20260109-09:46:41] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:46:41] [INFO ] sesman connect ok
[20260109-09:46:41] [INFO ] sending login info to session manager. Please wait...
[20260109-09:46:42] [INFO ] xrdp_wm_log_msg: login failed for user pentester
[20260109-09:46:42] [INFO ] login failed for user pentester


_raw: [20260109-09:46:40] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 52270


_raw:
[20260109-09:46:36] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:46:36] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:46:36] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw:
[20260109-09:46:33] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:46:33] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:46:33] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:46:33] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:46:33] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260109-09:46:33] [ERROR] libxrdp_force_read: header read error
[20260109-09:46:33] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260109-09:46:33] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260109-09:46:33] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260109-09:46:33] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260109-09:46:33] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260109-09:46:33] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260109-09:46:33] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260109-09:46:36] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.106 port 58046
[20260109-09:46:36] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:46:36] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:46:36] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:46:36] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:46:36] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:46:36] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:46:36] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:46:36] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:46:36] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:46:36] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:46:36] [INFO ] Non-TLS connection established from ::ffff:10.0.254.106 port 58046: with security level : high
[20260109-09:46:36] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:46:36] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:46:36] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:46:36] [WARN ] xrdp_caps_process_codecs: unknown codec id 5


_raw: [20260109-09:46:33] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.106 port 58045


_raw:
[20260109-09:46:32] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:46:32] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:46:32] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:46:32] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:46:32] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260109-09:46:32] [ERROR] libxrdp_force_read: header read error
[20260109-09:46:32] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260109-09:46:32] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260109-09:46:32] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260109-09:46:32] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260109-09:46:32] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260109-09:46:32] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260109-09:46:32] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260109-09:46:34] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.105 port 58011
[20260109-09:46:34] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:46:34] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:46:34] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:46:34] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:46:34] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:46:34] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:46:34] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:46:34] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:46:34] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:46:34] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:46:34] [INFO ] Non-TLS connection established from ::ffff:10.0.254.105 port 58011: with security level : high
[20260109-09:46:34] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:46:34] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:46:34] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:46:34] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:46:34] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:46:34] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:46:34] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: [20260109-09:46:32] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.105 port 58010


_raw:
[20260109-09:46:27] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:46:27] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:46:27] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:46:27] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:46:27] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260109-09:46:27] [ERROR] libxrdp_force_read: header read error
[20260109-09:46:27] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260109-09:46:27] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260109-09:46:27] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260109-09:46:27] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260109-09:46:27] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260109-09:46:27] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260109-09:46:27] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260109-09:46:28] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.102 port 58014
[20260109-09:46:28] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:46:28] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:46:28] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:46:28] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:46:28] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:46:28] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:46:28] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:46:28] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:46:28] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:46:28] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:46:28] [INFO ] Non-TLS connection established from ::ffff:10.0.254.102 port 58014: with security level : high
[20260109-09:46:28] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:46:28] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:46:28] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:46:28] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:46:28] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:46:28] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:46:28] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: [20260109-09:46:27] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.102 port 58013


_raw: [20260109-09:46:25] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.104 port 58048


_raw:
[20260109-09:46:25] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:46:25] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:46:25] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:46:25] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:46:25] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260109-09:46:25] [ERROR] libxrdp_force_read: header read error
[20260109-09:46:25] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260109-09:46:25] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260109-09:46:25] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260109-09:46:25] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260109-09:46:25] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260109-09:46:25] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260109-09:46:25] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260109-09:46:26] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.104 port 58049
[20260109-09:46:26] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:46:26] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:46:26] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:46:26] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:46:26] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:46:26] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:46:26] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:46:26] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:46:26] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:46:26] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:46:26] [INFO ] Non-TLS connection established from ::ffff:10.0.254.104 port 58049: with security level : high
[20260109-09:46:26] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:46:26] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:46:26] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:46:26] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:46:26] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:46:26] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:46:26] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw:
[20260109-09:46:24] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:46:24] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:46:24] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:46:24] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:46:24] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260109-09:46:24] [ERROR] libxrdp_force_read: header read error
[20260109-09:46:24] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260109-09:46:24] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260109-09:46:24] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260109-09:46:24] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260109-09:46:24] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260109-09:46:24] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260109-09:46:24] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260109-09:46:26] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.103 port 58023
[20260109-09:46:26] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:46:26] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:46:26] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:46:26] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:46:26] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:46:26] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:46:26] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:46:26] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:46:26] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:46:26] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:46:26] [INFO ] Non-TLS connection established from ::ffff:10.0.254.103 port 58023: with security level : high
[20260109-09:46:26] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:46:26] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:46:26] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:46:26] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:46:26] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:46:26] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:46:26] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: [20260109-09:46:24] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.103 port 58022


_raw:
[20260109-09:46:21] [ERROR] pam_authenticate failed: Authentication failure
[20260109-09:46:21] [INFO ] AUTHFAIL: user=pentester ip=::ffff:10.0.254.106 time=1767969981
[20260109-09:46:21] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:46:21] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans


_raw:
[20260109-09:46:19] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:46:19] [INFO ] sesman connect ok
[20260109-09:46:19] [INFO ] sending login info to session manager. Please wait...
[20260109-09:46:21] [INFO ] xrdp_wm_log_msg: login failed for user pentester
[20260109-09:46:21] [INFO ] login failed for user pentester


_raw: [20260109-09:46:19] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 44354


_raw:
[20260109-09:46:07] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:46:07] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:46:07] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:46:07] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:46:07] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260109-09:46:07] [ERROR] libxrdp_force_read: header read error
[20260109-09:46:07] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260109-09:46:07] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260109-09:46:07] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260109-09:46:07] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260109-09:46:07] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260109-09:46:07] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260109-09:46:07] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260109-09:46:10] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.104 port 57945
[20260109-09:46:10] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:46:10] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:46:10] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:46:10] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:46:10] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:46:10] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:46:10] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:46:10] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:46:10] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:46:10] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:46:10] [INFO ] Non-TLS connection established from ::ffff:10.0.254.104 port 57945: with security level : high
[20260109-09:46:10] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:46:10] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:46:10] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:46:10] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:46:10] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:46:10] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:46:10] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: [20260109-09:46:07] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.104 port 57944


_raw: (lightdm-gtk-greeter:946): Gtk-WARNING **: 09:46:00.997: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:46:00.990: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:46:00.990: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:932): Gtk-WARNING **: 09:46:00.985: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:46:00.975: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:941): Gtk-WARNING **: 09:46:00.964: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:46:00.962: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:46:00.955: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:46:00.950: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:952): Gtk-WARNING **: 09:46:00.944: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:928): Gtk-WARNING **: 09:46:00.923: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1044): Gtk-WARNING **: 09:46:00.905: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:46:00.903: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1151): Gtk-WARNING **: 09:46:00.891: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:938): Gtk-WARNING **: 09:46:00.843: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:934): Gtk-WARNING **: 09:46:00.823: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:934): Gtk-WARNING **: 09:46:00.786: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:968): Gtk-WARNING **: 09:46:00.786: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:46:00.782: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:945): Gtk-WARNING **: 09:46:00.765: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:959): Gtk-WARNING **: 09:46:00.728: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1158): Gtk-WARNING **: 09:46:00.728: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:46:00.711: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1153): Gtk-WARNING **: 09:46:00.702: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:946): Gtk-WARNING **: 09:46:00.700: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1149): Gtk-WARNING **: 09:46:00.696: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:46:00.679: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:46:00.678: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:46:00.662: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:46:00.591: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:46:00.581: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:46:00.577: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:46:00.567: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:46:00.542: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:934): Gtk-WARNING **: 09:46:00.540: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:46:00.522: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:46:00.512: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:46:00.479: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1319): Gtk-WARNING **: 09:46:00.463: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:938): Gtk-WARNING **: 09:46:00.461: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:46:00.458: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:944): Gtk-WARNING **: 09:46:00.444: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:46:00.436: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:932): Gtk-WARNING **: 09:46:00.415: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:941): Gtk-WARNING **: 09:46:00.343: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:961): Gtk-WARNING **: 09:46:00.310: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:46:00.303: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:944): Gtk-WARNING **: 09:46:00.293: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:969): Gtk-WARNING **: 09:46:00.281: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:961): Gtk-WARNING **: 09:46:00.276: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:46:00.257: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:46:00.241: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:46:00.239: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:938): Gtk-WARNING **: 09:46:00.236: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:46:00.227: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:948): Gtk-WARNING **: 09:46:00.211: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1165): Gtk-WARNING **: 09:46:00.189: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:938): Gtk-WARNING **: 09:46:00.182: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:933): Gtk-WARNING **: 09:46:00.178: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:46:00.177: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)