_raw: 2026-01-09 09:51:48 startup archives unpack


_raw: 2026-01-09 09:51:45.462 EST [235049] LOG:  database system is ready to accept connections


_raw: 2026-01-09 09:51:45.388 EST [235049] LOG:  listening on Unix socket "/var/run/postgresql/.s.PGSQL.5432"


_raw:
[20260109-09:51:40] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20260109-09:51:40] [INFO ] ++ created session (access granted): username pentester, ip ::ffff:10.0.254.101:58281 - socket: 12
[20260109-09:51:40] [INFO ] starting Xorg session...
[20260109-09:51:40] [INFO ] Starting session: session_pid 229193, display :10.0, width 1920, height 1080, bpp 24, client ip ::ffff:10.0.254.101:58281 - socket: 12, user name pentester
[20260109-09:51:40] [INFO ] [session start] (display 10): calling auth_start_session from pid 229193
[20260109-09:51:40] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:51:40] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260109-09:51:40] [INFO ] Starting X server on display 10: /usr/lib/xorg/Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
[20260109-09:51:40] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:51:40] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:51:40] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:51:40] [INFO ] Session started successfully for user pentester on display 10
[20260109-09:51:40] [INFO ] Starting the xrdp channel server for display 10
[20260109-09:51:40] [INFO ] Starting the default window manager on display 10: /etc/xrdp/startwm.sh
[20260109-09:51:40] [INFO ] Session in progress on display 10, waiting until the window manager (pid 229220) exits to end the session


_raw:
[20260109-09:51:40] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:51:40] [INFO ] sesman connect ok
[20260109-09:51:40] [INFO ] sending login info to session manager. Please wait...
[20260109-09:51:40] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260109-09:51:40] [INFO ] login successful for user pentester on display 10
[20260109-09:51:40] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260109-09:51:40] [INFO ] started connecting
[20260109-09:51:40] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260109-09:51:40] [INFO ] lib_mod_log_peer: xrdp_pid=229159 connected to X11rdp_pid=229221 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.101 client_port=58281
[20260109-09:51:40] [INFO ] connected ok


_raw: [20260109-09:51:40] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 40156


_raw:
[20260109-09:51:32] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:51:32] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:51:32] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:51:32] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:51:32] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260109-09:51:32] [ERROR] libxrdp_force_read: header read error
[20260109-09:51:32] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260109-09:51:32] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260109-09:51:32] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260109-09:51:32] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260109-09:51:32] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260109-09:51:32] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260109-09:51:32] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260109-09:51:33] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.105 port 58108
[20260109-09:51:33] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:51:33] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:51:33] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:51:33] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:51:33] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:51:33] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:51:33] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:51:33] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:51:33] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:51:33] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:51:33] [INFO ] Non-TLS connection established from ::ffff:10.0.254.105 port 58108: with security level : high
[20260109-09:51:33] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:51:33] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:51:33] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:51:33] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:51:33] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:51:33] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:51:33] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: [20260109-09:51:32] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.105 port 58107


_raw:
Processing triggers for ca-certificates-java (20240118) ...
done.
Setting up openjdk-11-jre:amd64 (11.0.25~5ea-1) ...
Setting up neo4j (5.2.0+really4.4.26-0kali1) ...
Setting up bloodhound (8.3.1-0kali1) ...

_sourcetype: term

sourcetype: term


_raw: 2026-01-09 09:51:27 status installed bloodhound:amd64 8.3.1-0kali1


_raw: 2026-01-09 09:51:27 status half-configured bloodhound:amd64 8.3.1-0kali1


_raw: 2026-01-09 09:51:27 status unpacked bloodhound:amd64 8.3.1-0kali1


_raw: 2026-01-09 09:51:27 status half-configured neo4j:all 5.2.0+really4.4.26-0kali1


_raw: 2026-01-09 09:51:27 status installed ca-certificates-java:all 20240118


_raw: 2026-01-09 09:51:26 status installed openjdk-11-jre-headless:amd64 11.0.25~5ea-1


_raw: 2026-01-09 09:51:26 status half-configured ca-certificates-java:all 20240118


_raw: 2026-01-09 09:51:26 trigproc ca-certificates-java:all 20240118 <none>


_raw: 2026-01-09 09:51:26 status installed hicolor-icon-theme:all 0.18-2


_raw: 2026-01-09 09:51:26 status half-configured hicolor-icon-theme:all 0.18-2


_raw: 2026-01-09 09:51:26 trigproc hicolor-icon-theme:all 0.18-2 <none>


_raw: 2026-01-09 09:51:26 status installed desktop-file-utils:amd64 0.28-1


_raw: 2026-01-09 09:51:26 status half-configured desktop-file-utils:amd64 0.28-1


_raw: 2026-01-09 09:51:26 trigproc desktop-file-utils:amd64 0.28-1 <none>


_raw: 2026-01-09 09:51:26 status half-configured kali-menu:all 2025.4.3


_raw:
Setting up sharphound (2.8.0-0kali1) ...
Setting up binfmt-support (2.2.2-7) ...
update-binfmts: warning: python3.13 already enabled in kernel.
update-binfmts: warning: llvm-19-runtime.binfmt already enabled in kernel.
update-binfmts: warning: llvm-18-runtime.binfmt already enabled in kernel.
Created symlink '/etc/systemd/system/multi-user.target.wants/binfmt-support.service' → '/usr/lib/systemd/system/binfmt-support.service'.
Setting up azurehound (2.8.1-0kali1) ...
Setting up bloodyad (2.1.7-0kali1) ...
Setting up jarwrapper (0.81) ...
Processing triggers for man-db (2.13.1-1) ...
Processing triggers for kali-menu (2025.4.3) ...
Processing triggers for desktop-file-utils (0.28-1) ...
Processing triggers for hicolor-icon-theme (0.18-2) ...


_raw: 2026-01-09 09:51:24 status installed jarwrapper:all 0.81


_raw: 2026-01-09 09:51:24 status half-configured jarwrapper:all 0.81


_raw: 2026-01-09 09:51:24 status unpacked jarwrapper:all 0.81


_raw: 2026-01-09 09:51:24 configure jarwrapper:all 0.81 <none>


_raw: 2026-01-09 09:51:24 status installed bloodyad:all 2.1.7-0kali1


_raw: 2026-01-09 09:51:24 status half-configured bloodyad:all 2.1.7-0kali1


_raw: 2026-01-09 09:51:24 status unpacked bloodyad:all 2.1.7-0kali1


_raw: 2026-01-09 09:51:24 status installed azurehound:amd64 2.8.1-0kali1


_raw: 2026-01-09 09:51:24 status half-configured azurehound:amd64 2.8.1-0kali1


_raw: 2026-01-09 09:51:24 status unpacked azurehound:amd64 2.8.1-0kali1


_raw: 2026-01-09 09:51:24 status installed binfmt-support:amd64 2.2.2-7


_raw: 2026-01-09 09:51:23 status half-configured binfmt-support:amd64 2.2.2-7


_raw: 2026-01-09 09:51:23 status unpacked binfmt-support:amd64 2.2.2-7


_raw: 2026-01-09 09:51:23 status installed sharphound:all 2.8.0-0kali1


_raw: 2026-01-09 09:51:23 status half-configured sharphound:all 2.8.0-0kali1


_raw: 2026-01-09 09:51:23 status unpacked sharphound:all 2.8.0-0kali1


_raw: 2026-01-09 09:51:23 configure sharphound:all 2.8.0-0kali1 <none>


_raw: 2026-01-09 09:51:23 status triggers-awaited openjdk-11-jre-headless:amd64 11.0.25~5ea-1


_raw: 2026-01-09 09:51:23 status triggers-pending ca-certificates-java:all 20240118


_raw: 2026-01-09 09:51:23 status installed openjdk-11-jre-headless:amd64 11.0.25~5ea-1


_raw: 2026-01-09 09:51:23 status half-configured openjdk-11-jre-headless:amd64 11.0.25~5ea-1


_raw: 2026-01-09 09:51:23 status unpacked openjdk-11-jre-headless:amd64 11.0.25~5ea-1


_raw: 2026-01-09 09:51:23 status half-configured fastjar:amd64 2:0.98-7


_raw: 2026-01-09 09:51:23 startup packages configure


_raw:
Selecting previously unselected package bloodhound.
Preparing to unpack .../7-bloodhound_8.3.1-0kali1_amd64.deb ...
Unpacking bloodhound (8.3.1-0kali1) ...
Selecting previously unselected package bloodyad.
Preparing to unpack .../8-bloodyad_2.1.7-0kali1_all.deb ...
Unpacking bloodyad (2.1.7-0kali1) ...
Selecting previously unselected package sharphound.
Preparing to unpack .../9-sharphound_2.8.0-0kali1_all.deb ...
Unpacking sharphound (2.8.0-0kali1) ...
Setting up fastjar (2:0.98-7) ...
Setting up openjdk-11-jre-headless:amd64 (11.0.25~5ea-1) ...
update-alternatives: using /usr/lib/jvm/java-11-openjdk-amd64/bin/jjs to provide /usr/bin/jjs (jjs) in auto mode
update-alternatives: using /usr/lib/jvm/java-11-openjdk-amd64/bin/rmid to provide /usr/bin/rmid (rmid) in auto mode
update-alternatives: using /usr/lib/jvm/java-11-openjdk-amd64/bin/pack200 to provide /usr/bin/pack200 (pack200) in auto mode
update-alternatives: using /usr/lib/jvm/java-11-openjdk-amd64/bin/unpack200 to provide /usr/bin/unpack200 (unpack200) in auto mode


_raw: update-alternatives 2026-01-09 09:51:23: run with --install /usr/bin/jexec jexec /usr/lib/jvm/java-11-openjdk-amd64/lib/jexec 1111 --slave /usr/share/binfmts/jar jexec-binfmt /usr/lib/jvm/java-11-openjdk-amd64/lib/jar.binfmt


_raw: update-alternatives 2026-01-09 09:51:23: link group unpack200 updated to point to /usr/lib/jvm/java-11-openjdk-amd64/bin/unpack200


_raw: update-alternatives 2026-01-09 09:51:23: run with --install /usr/bin/unpack200 unpack200 /usr/lib/jvm/java-11-openjdk-amd64/bin/unpack200 1111 --slave /usr/share/man/man1/unpack200.1.gz unpack200.1.gz /usr/lib/jvm/java-11-openjdk-amd64/man/man1/unpack200.1.gz


_raw: update-alternatives 2026-01-09 09:51:23: link group pack200 updated to point to /usr/lib/jvm/java-11-openjdk-amd64/bin/pack200


_raw: update-alternatives 2026-01-09 09:51:23: run with --install /usr/bin/pack200 pack200 /usr/lib/jvm/java-11-openjdk-amd64/bin/pack200 1111 --slave /usr/share/man/man1/pack200.1.gz pack200.1.gz /usr/lib/jvm/java-11-openjdk-amd64/man/man1/pack200.1.gz


_raw: update-alternatives 2026-01-09 09:51:23: run with --install /usr/bin/rmiregistry rmiregistry /usr/lib/jvm/java-11-openjdk-amd64/bin/rmiregistry 1111 --slave /usr/share/man/man1/rmiregistry.1.gz rmiregistry.1.gz /usr/lib/jvm/java-11-openjdk-amd64/man/man1/rmiregistry.1.gz


_raw: update-alternatives 2026-01-09 09:51:23: link group rmid updated to point to /usr/lib/jvm/java-11-openjdk-amd64/bin/rmid


_raw: update-alternatives 2026-01-09 09:51:23: run with --install /usr/bin/rmid rmid /usr/lib/jvm/java-11-openjdk-amd64/bin/rmid 1111 --slave /usr/share/man/man1/rmid.1.gz rmid.1.gz /usr/lib/jvm/java-11-openjdk-amd64/man/man1/rmid.1.gz


_raw: update-alternatives 2026-01-09 09:51:23: run with --install /usr/bin/keytool keytool /usr/lib/jvm/java-11-openjdk-amd64/bin/keytool 1111 --slave /usr/share/man/man1/keytool.1.gz keytool.1.gz /usr/lib/jvm/java-11-openjdk-amd64/man/man1/keytool.1.gz


_raw: update-alternatives 2026-01-09 09:51:23: link group jjs updated to point to /usr/lib/jvm/java-11-openjdk-amd64/bin/jjs


_raw: update-alternatives 2026-01-09 09:51:23: run with --install /usr/bin/jjs jjs /usr/lib/jvm/java-11-openjdk-amd64/bin/jjs 1111 --slave /usr/share/man/man1/jjs.1.gz jjs.1.gz /usr/lib/jvm/java-11-openjdk-amd64/man/man1/jjs.1.gz


_raw: update-alternatives 2026-01-09 09:51:23: run with --install /usr/bin/java java /usr/lib/jvm/java-11-openjdk-amd64/bin/java 1111 --slave /usr/share/man/man1/java.1.gz java.1.gz /usr/lib/jvm/java-11-openjdk-amd64/man/man1/java.1.gz


_raw: update-alternatives 2026-01-09 09:51:23: link group jar updated to point to /usr/bin/fastjar


_raw: update-alternatives 2026-01-09 09:51:23: run with --quiet --install /usr/bin/jar jar /usr/bin/fastjar 100 --slave /usr/share/man/man1/jar.1.gz jar.1.gz /usr/share/man/man1/fastjar.1.gz


_raw: 2026-01-09 09:51:23 status unpacked sharphound:all 2.8.0-0kali1


_raw: 2026-01-09 09:51:22 status half-installed sharphound:all 2.8.0-0kali1


_raw: 2026-01-09 09:51:22 status unpacked bloodyad:all 2.1.7-0kali1


_raw: 2026-01-09 09:51:22 status half-installed bloodyad:all 2.1.7-0kali1


_raw: 2026-01-09 09:51:22 status unpacked bloodhound:amd64 8.3.1-0kali1


_raw:
[20260109-09:51:21] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:51:21] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:51:21] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:51:21] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:51:21] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260109-09:51:21] [ERROR] libxrdp_force_read: header read error
[20260109-09:51:21] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260109-09:51:21] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260109-09:51:21] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260109-09:51:21] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260109-09:51:21] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260109-09:51:21] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260109-09:51:21] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260109-09:51:23] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.103 port 58275
[20260109-09:51:23] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:51:23] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:51:23] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:51:23] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:51:23] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:51:23] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:51:23] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:51:23] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:51:23] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:51:23] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:51:23] [INFO ] Non-TLS connection established from ::ffff:10.0.254.103 port 58275: with security level : high
[20260109-09:51:23] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:51:23] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:51:23] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:51:23] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:51:23] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:51:23] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:51:23] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: [20260109-09:51:21] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.103 port 58274


_raw: [+85526.61s] DEBUG: User /org/freedesktop/Accounts/User1000 added


_raw: 2026-01-09 09:51:21 status half-installed bloodhound:amd64 8.3.1-0kali1


_raw: 2026-01-09 09:51:20 status half-installed neo4j:all 5.2.0+really4.4.26-0kali1


_raw: 2026-01-09 09:51:20 status triggers-pending hicolor-icon-theme:all 0.18-2


_raw: 2026-01-09 09:51:20 status triggers-pending desktop-file-utils:amd64 0.28-1


_raw: 2026-01-09 09:51:20 status unpacked openjdk-11-jre-headless:amd64 11.0.25~5ea-1


_raw:
Selecting previously unselected package binfmt-support.
(Reading database ...
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 454625 files and directories currently installed.)
Preparing to unpack .../0-binfmt-support_2.2.2-7_amd64.deb ...
Unpacking binfmt-support (2.2.2-7) ...
Selecting previously unselected package azurehound.
Preparing to unpack .../1-azurehound_2.8.1-0kali1_amd64.deb ...
Unpacking azurehound (2.8.1-0kali1) ...
Selecting previously unselected package fastjar.
Preparing to unpack .../2-fastjar_2%3a0.98-7_amd64.deb ...
Unpacking fastjar (2:0.98-7) ...
Selecting previously unselected package jarwrapper.
Preparing to unpack .../3-jarwrapper_0.81_all.deb ...
Unpacking jarwrapper (0.81) ...
Selecting previously unselected package openjdk-11-jre-headless:amd64.
Preparing to unpack .../4-openjdk-11-jre-headless_11.0.25~5ea-1_amd64.deb ...
Unpacking openjdk-11-jre-headless:amd64 (11.0.25~5ea-1) ...
Selecting previously unselected package openjdk-11-jre:amd64.
Preparing to unpack .../5-openjdk-11-jre_11.0.25~5ea-1_amd64.deb ...
Unpacking openjdk-11-jre:amd64 (11.0.25~5ea-1) ...
Selecting previously unselected package neo4j.
Preparing to unpack .../6-neo4j_5.2.0+really4.4.26-0kali1_all.deb ...
Unpacking neo4j (5.2.0+really4.4.26-0kali1) ...


_raw:
[20260109-09:51:19] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.103 port 58098
[20260109-09:51:19] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:51:19] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:51:19] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:51:19] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:51:19] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:51:19] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:51:19] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:51:19] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:51:19] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:51:19] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:51:19] [INFO ] Non-TLS connection established from ::ffff:10.0.254.103 port 58098: with security level : high
[20260109-09:51:19] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:51:19] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:51:19] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:51:19] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:51:19] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:51:19] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:51:19] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: 2026-01-09 09:51:19 status half-installed openjdk-11-jre-headless:amd64 11.0.25~5ea-1


_raw: 2026-01-09 09:51:18 status unpacked jarwrapper:all 0.81


_raw: 2026-01-09 09:51:18 status half-installed jarwrapper:all 0.81


_raw: 2026-01-09 09:51:18 status unpacked azurehound:amd64 2.8.1-0kali1


_raw: 2026-01-09 09:51:18 status half-installed azurehound:amd64 2.8.1-0kali1


_raw: 2026-01-09 09:51:18 status unpacked binfmt-support:amd64 2.2.2-7


_raw: 2026-01-09 09:51:18 status triggers-pending kali-menu:all 2025.4.3


_raw: 2026-01-09 09:51:18 status half-installed binfmt-support:amd64 2.2.2-7


_raw: 2026-01-09 09:51:17 startup archives unpack


_raw:
Start-Date: 2026-01-09  09:51:17
Commandline: apt-get install bloodhound bloodyad
Requested-By: pentester (1001)
Install: openjdk-11-jre:amd64 (11.0.25~5ea-1, automatic), openjdk-11-jre-headless:amd64 (11.0.25~5ea-1, automatic), binfmt-support:amd64 (2.2.2-7, automatic), jarwrapper:amd64 (0.81, automatic), sharphound:amd64 (2.8.0-0kali1, automatic), azurehound:amd64 (2.8.1-0kali1, automatic), bloodhound:amd64 (8.3.1-0kali1), fastjar:amd64 (2:0.98-7, automatic), neo4j:amd64 (5.2.0+really4.4.26-0kali1, automatic), bloodyad:amd64 (2.1.7-0kali1)


_raw:
[20260109-09:51:16] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:51:16] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:51:16] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:51:16] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:51:16] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260109-09:51:16] [ERROR] libxrdp_force_read: header read error
[20260109-09:51:16] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260109-09:51:16] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260109-09:51:16] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260109-09:51:16] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260109-09:51:16] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260109-09:51:16] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260109-09:51:16] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed


_raw: [20260109-09:51:16] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.103 port 58097


_raw:
[20260109-09:51:15] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20260109-09:51:15] [INFO ] ++ created session (access granted): username pentester, ip ::ffff:10.0.254.103:58198 - socket: 12
[20260109-09:51:15] [INFO ] starting Xorg session...
[20260109-09:51:15] [INFO ] Starting session: session_pid 229443, display :10.0, width 1920, height 1080, bpp 24, client ip ::ffff:10.0.254.103:58198 - socket: 12, user name pentester
[20260109-09:51:15] [INFO ] [session start] (display 10): calling auth_start_session from pid 229443
[20260109-09:51:15] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:51:15] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260109-09:51:15] [INFO ] Starting X server on display 10: /usr/lib/xorg/Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
[20260109-09:51:15] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:51:15] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:51:15] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:51:15] [INFO ] Session started successfully for user pentester on display 10
[20260109-09:51:15] [INFO ] Session in progress on display 10, waiting until the window manager (pid 229470) exits to end the session
[20260109-09:51:15] [INFO ] Starting the xrdp channel server for display 10
[20260109-09:51:15] [INFO ] Starting the default window manager on display 10: /etc/xrdp/startwm.sh


_raw:
[20260109-09:51:15] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:51:15] [INFO ] sesman connect ok
[20260109-09:51:15] [INFO ] sending login info to session manager. Please wait...
[20260109-09:51:15] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260109-09:51:15] [INFO ] login successful for user pentester on display 10
[20260109-09:51:15] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260109-09:51:15] [INFO ] started connecting
[20260109-09:51:15] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260109-09:51:15] [INFO ] lib_mod_log_peer: xrdp_pid=229394 connected to X11rdp_pid=229471 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.103 client_port=58198
[20260109-09:51:15] [INFO ] connected ok


_raw: [20260109-09:51:15] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 50130


_raw:
[20260109-09:51:12] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:51:12] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:51:12] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:51:12] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:51:12] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260109-09:51:12] [ERROR] libxrdp_force_read: header read error
[20260109-09:51:12] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260109-09:51:12] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260109-09:51:12] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260109-09:51:12] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260109-09:51:12] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260109-09:51:12] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260109-09:51:12] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260109-09:51:14] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.101 port 58281
[20260109-09:51:14] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:51:14] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:51:14] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:51:14] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:51:14] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:51:14] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:51:14] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:51:14] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:51:14] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:51:14] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:51:14] [INFO ] Non-TLS connection established from ::ffff:10.0.254.101 port 58281: with security level : high
[20260109-09:51:14] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:51:14] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:51:14] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:51:14] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:51:14] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:51:14] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:51:14] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: [20260109-09:51:12] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.101 port 58280


_raw:
[20260109-09:51:10] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.105 port 58299
[20260109-09:51:10] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:51:10] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:51:11] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:51:11] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:51:11] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:51:11] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:51:11] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:51:11] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:51:11] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:51:11] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:51:11] [INFO ] Non-TLS connection established from ::ffff:10.0.254.105 port 58299: with security level : high
[20260109-09:51:11] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:51:11] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:51:11] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:51:11] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:51:11] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:51:11] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:51:11] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: Processing triggers for kali-menu (2025.4.3) ...


_raw: 2026-01-09 09:51:06 status half-configured kali-menu:all 2025.4.3


_raw:
[20260109-09:51:06] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20260109-09:51:06] [INFO ] ++ created session (access granted): username pentester, ip ::ffff:10.0.254.104:58096 - socket: 12
[20260109-09:51:06] [INFO ] starting Xorg session...
[20260109-09:51:06] [INFO ] Starting session: session_pid 229193, display :10.0, width 1920, height 1080, bpp 24, client ip ::ffff:10.0.254.104:58096 - socket: 12, user name pentester
[20260109-09:51:06] [INFO ] [session start] (display 10): calling auth_start_session from pid 229193
[20260109-09:51:06] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:51:06] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260109-09:51:06] [INFO ] Starting X server on display 10: /usr/lib/xorg/Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
[20260109-09:51:06] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:51:06] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:51:06] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:51:06] [INFO ] Session started successfully for user pentester on display 10
[20260109-09:51:06] [INFO ] Session in progress on display 10, waiting until the window manager (pid 229220) exits to end the session
[20260109-09:51:06] [INFO ] Starting the xrdp channel server for display 10
[20260109-09:51:06] [INFO ] Starting the default window manager on display 10: /etc/xrdp/startwm.sh


_raw:
[20260109-09:51:06] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:51:06] [INFO ] sesman connect ok
[20260109-09:51:06] [INFO ] sending login info to session manager. Please wait...
[20260109-09:51:06] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260109-09:51:06] [INFO ] login successful for user pentester on display 10
[20260109-09:51:06] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260109-09:51:06] [INFO ] started connecting
[20260109-09:51:06] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260109-09:51:06] [INFO ] lib_mod_log_peer: xrdp_pid=229129 connected to X11rdp_pid=229221 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.104 client_port=58096
[20260109-09:51:06] [INFO ] connected ok


_raw: [20260109-09:51:06] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 47112


_raw:
[20260109-09:51:06] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:51:06] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:51:06] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:51:06] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:51:06] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260109-09:51:06] [ERROR] libxrdp_force_read: header read error
[20260109-09:51:06] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260109-09:51:06] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260109-09:51:06] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260109-09:51:06] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260109-09:51:06] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260109-09:51:06] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260109-09:51:06] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed


_raw: [20260109-09:51:06] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.105 port 58297


_raw: 2026-01-09 09:51:04 status installed hicolor-icon-theme:all 0.18-2


_raw: 2026-01-09 09:51:04 status half-configured hicolor-icon-theme:all 0.18-2


_raw: 2026-01-09 09:51:04 trigproc hicolor-icon-theme:all 0.18-2 <none>


_raw: 2026-01-09 09:51:04 status installed desktop-file-utils:amd64 0.28-1


_raw: 2026-01-09 09:51:04 status half-configured desktop-file-utils:amd64 0.28-1


_raw: 2026-01-09 09:51:04 trigproc desktop-file-utils:amd64 0.28-1 <none>


_raw: 2026-01-09 09:51:04 status half-configured flameshot:amd64 12.1.0+ds-4


_raw: 2026-01-09 09:51:04 startup packages configure


_raw:
Selecting previously unselected package flameshot.
(Reading database ...
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 449315 files and directories currently installed.)
Preparing to unpack .../flameshot_12.1.0+ds-4_amd64.deb ...
Unpacking flameshot (12.1.0+ds-4) ...
Selecting previously unselected package grim.
Preparing to unpack .../grim_1.4.0+ds-2+b1_amd64.deb ...
Unpacking grim (1.4.0+ds-2+b1) ...
Setting up flameshot (12.1.0+ds-4) ...
Setting up grim (1.4.0+ds-2+b1) ...
Processing triggers for desktop-file-utils (0.28-1) ...
Processing triggers for hicolor-icon-theme (0.18-2) ...
Processing triggers for man-db (2.13.1-1) ...


_raw: 2026-01-09 09:51:03 status triggers-pending hicolor-icon-theme:all 0.18-2


_raw: 2026-01-09 09:51:03 status triggers-pending desktop-file-utils:amd64 0.28-1


_raw: 2026-01-09 09:51:03 status triggers-pending kali-menu:all 2025.4.3


_raw: 2026-01-09 09:51:03 status half-installed flameshot:amd64 12.1.0+ds-4


_raw: 2026-01-09 09:51:02 startup archives unpack


_raw:
Start-Date: 2026-01-09  09:51:02
Commandline: apt install flameshot
Requested-By: pentester (1001)
Install: grim:amd64 (1.4.0+ds-2+b1, automatic), flameshot:amd64 (12.1.0+ds-4)


_raw:
[20260109-09:51:02] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20260109-09:51:02] [INFO ] ++ created session (access granted): username pentester, ip ::ffff:10.0.254.104:58589 - socket: 12
[20260109-09:51:02] [INFO ] starting Xorg session...
[20260109-09:51:02] [INFO ] Starting session: session_pid 229034, display :10.0, width 1920, height 1080, bpp 24, client ip ::ffff:10.0.254.104:58589 - socket: 12, user name pentester
[20260109-09:51:02] [INFO ] [session start] (display 10): calling auth_start_session from pid 229034
[20260109-09:51:02] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:51:02] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260109-09:51:03] [INFO ] Starting X server on display 10: /usr/lib/xorg/Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
[20260109-09:51:03] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:51:03] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:51:03] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:51:03] [INFO ] Session started successfully for user pentester on display 10
[20260109-09:51:03] [INFO ] Starting the xrdp channel server for display 10
[20260109-09:51:03] [INFO ] Starting the default window manager on display 10: /etc/xrdp/startwm.sh
[20260109-09:51:03] [INFO ] Session in progress on display 10, waiting until the window manager (pid 229061) exits to end the session


_raw:
[20260109-09:51:02] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:51:02] [INFO ] sesman connect ok
[20260109-09:51:02] [INFO ] sending login info to session manager. Please wait...
[20260109-09:51:02] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260109-09:51:02] [INFO ] login successful for user pentester on display 10
[20260109-09:51:02] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260109-09:51:02] [INFO ] started connecting
[20260109-09:51:02] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260109-09:51:03] [INFO ] lib_mod_log_peer: xrdp_pid=228951 connected to X11rdp_pid=229062 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.104 client_port=58589
[20260109-09:51:03] [INFO ] connected ok


_raw: [20260109-09:51:02] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 60174


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:51:01.000: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:51:00.997: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:51:00.963: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:51:00.891: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:51:00.877: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:51:00.868: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:51:00.851: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:51:00.833: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:51:00.825: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:934): Gtk-WARNING **: 09:51:00.822: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:51:00.820: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:51:00.784: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1319): Gtk-WARNING **: 09:51:00.782: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:938): Gtk-WARNING **: 09:51:00.775: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:51:00.745: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:944): Gtk-WARNING **: 09:51:00.730: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:51:00.725: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:932): Gtk-WARNING **: 09:51:00.723: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:941): Gtk-WARNING **: 09:51:00.652: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:961): Gtk-WARNING **: 09:51:00.611: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:944): Gtk-WARNING **: 09:51:00.606: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:51:00.605: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:961): Gtk-WARNING **: 09:51:00.589: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:969): Gtk-WARNING **: 09:51:00.582: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:51:00.570: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:51:00.561: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:938): Gtk-WARNING **: 09:51:00.553: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:51:00.545: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:51:00.515: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1165): Gtk-WARNING **: 09:51:00.504: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:948): Gtk-WARNING **: 09:51:00.499: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:51:00.490: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:933): Gtk-WARNING **: 09:51:00.482: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:938): Gtk-WARNING **: 09:51:00.482: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:51:00.481: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:944): Gtk-WARNING **: 09:51:00.471: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:51:00.459: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:51:00.440: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:949): Gtk-WARNING **: 09:51:00.438: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:51:00.429: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:51:00.428: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:51:00.420: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:946): Gtk-WARNING **: 09:51:00.410: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:51:00.404: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:51:00.396: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:51:00.391: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:944): Gtk-WARNING **: 09:51:00.373: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:946): Gtk-WARNING **: 09:51:00.370: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:51:00.346: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:948): Gtk-WARNING **: 09:51:00.339: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:51:00.333: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:51:00.330: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:946): Gtk-WARNING **: 09:51:00.305: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:51:00.301: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:51:00.292: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:51:00.287: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:932): Gtk-WARNING **: 09:51:00.285: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:51:00.285: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:941): Gtk-WARNING **: 09:51:00.273: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:51:00.258: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:51:00.256: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:952): Gtk-WARNING **: 09:51:00.251: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:928): Gtk-WARNING **: 09:51:00.234: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1044): Gtk-WARNING **: 09:51:00.211: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1151): Gtk-WARNING **: 09:51:00.208: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:51:00.204: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:938): Gtk-WARNING **: 09:51:00.155: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:934): Gtk-WARNING **: 09:51:00.127: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:934): Gtk-WARNING **: 09:51:00.107: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:968): Gtk-WARNING **: 09:51:00.085: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:945): Gtk-WARNING **: 09:51:00.078: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:51:00.077: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1158): Gtk-WARNING **: 09:51:00.044: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:959): Gtk-WARNING **: 09:51:00.032: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:51:00.016: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:946): Gtk-WARNING **: 09:51:00.011: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1153): Gtk-WARNING **: 09:51:00.010: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1149): Gtk-WARNING **: 09:51:00.007: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw:
[20260109-09:51:00] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.102 port 58029
[20260109-09:51:00] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:51:00] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:51:00] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:51:00] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:51:00] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:51:00] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:51:00] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:51:00] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:51:00] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:51:00] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:51:00] [INFO ] Non-TLS connection established from ::ffff:10.0.254.102 port 58029: with security level : high
[20260109-09:51:00] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:51:00] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:51:00] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:51:00] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:51:00] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:51:00] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:51:00] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: Processing triggers for kali-menu (2025.4.3) ...


_raw:
[20260109-09:50:56] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:50:56] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:50:56] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:50:56] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:50:56] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260109-09:50:56] [ERROR] libxrdp_force_read: header read error
[20260109-09:50:56] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260109-09:50:56] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260109-09:50:56] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260109-09:50:56] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260109-09:50:56] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260109-09:50:56] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260109-09:50:56] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed


_raw: [20260109-09:50:56] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.102 port 58027


_raw: 2026-01-09 09:50:56 status half-configured kali-menu:all 2025.4.3


_raw: 2026-01-09 09:50:54 status half-configured libc-bin:amd64 2.41-12


_raw: 2026-01-09 09:50:54 status half-configured binutils-mingw-w64:all 2.45-7+12.1


_raw: 2026-01-09 09:50:54 status half-configured sliver:amd64 1.5.42-0kali1


_raw: 2026-01-09 09:50:54 status installed asciinema:all 2.4.0-1


_raw: 2026-01-09 09:50:54 status half-configured asciinema:all 2.4.0-1


_raw: 2026-01-09 09:50:54 status unpacked asciinema:all 2.4.0-1


_raw: 2026-01-09 09:50:54 status half-configured binutils-mingw-w64-ucrt64:amd64 2.45-7+12.1


_raw: 2026-01-09 09:50:54 status half-configured gcc-mingw-w64-i686-posix-runtime:amd64 15.2.0-7+28


_raw: 2026-01-09 09:50:54 status half-configured gcc-mingw-w64-x86-64-posix-runtime:amd64 15.2.0-7+28


_raw: 2026-01-09 09:50:54 startup packages configure


_raw:
Preparing to unpack .../15-gcc-mingw-w64-x86-64_15.2.0-7+28_all.deb ...
Unpacking gcc-mingw-w64-x86-64 (15.2.0-7+28) ...
Selecting previously unselected package gcc-mingw-w64.
Preparing to unpack .../16-gcc-mingw-w64_15.2.0-7+28_all.deb ...
Unpacking gcc-mingw-w64 (15.2.0-7+28) ...
Selecting previously unselected package mingw-w64.
Preparing to unpack .../17-mingw-w64_13.0.0-1_all.deb ...
Unpacking mingw-w64 (13.0.0-1) ...
Selecting previously unselected package sliver.
Preparing to unpack .../18-sliver_1.5.42-0kali1_amd64.deb ...
Unpacking sliver (1.5.42-0kali1) ...
Setting up g++-mingw-w64-i686-win32 (15.2.0-7+28) ...
update-alternatives: using /usr/bin/i686-w64-mingw32-g++-win32 to provide /usr/bin/i686-w64-mingw32-g++ (i686-w64-mingw32-g++) in auto mode
Setting up g++-mingw-w64-x86-64-win32 (15.2.0-7+28) ...
update-alternatives: using /usr/bin/x86_64-w64-mingw32-g++-win32 to provide /usr/bin/x86_64-w64-mingw32-g++ (x86_64-w64-mingw32-g++) in auto mode
Setting up gcc-mingw-w64-x86-64-posix-runtime (15.2.0-7+28) ...
Setting up gcc-mingw-w64-x86-64-posix (15.2.0-7+28) ...
Setting up gcc-mingw-w64-i686-posix-runtime (15.2.0-7+28) ...
Setting up gcc-mingw-w64-x86-64 (15.2.0-7+28) ...
Setting up binutils-mingw-w64-ucrt64 (2.45-7+12.1) ...
Setting up asciinema (2.4.0-1) ...
Setting up sliver (1.5.42-0kali1) ...
Setting up gcc-mingw-w64-i686-posix (15.2.0-7+28) ...
Setting up g++-mingw-w64-x86-64-posix (15.2.0-7+28) ...
Setting up gcc-mingw-w64-i686 (15.2.0-7+28) ...
Setting up g++-mingw-w64-x86-64 (15.2.0-7+28) ...
Setting up binutils-mingw-w64 (2.45-7+12.1) ...
Setting up gcc-mingw-w64 (15.2.0-7+28) ...
Setting up g++-mingw-w64-i686-posix (15.2.0-7+28) ...
Setting up g++-mingw-w64-i686 (15.2.0-7+28) ...
Setting up g++-mingw-w64 (15.2.0-7+28) ...
Setting up mingw-w64 (13.0.0-1) ...
Processing triggers for libc-bin (2.41-12) ...
Processing triggers for man-db (2.13.1-1) ...


_raw: update-alternatives 2026-01-09 09:50:54: run with --install /usr/bin/i686-w64-mingw32-g++ i686-w64-mingw32-g++ /usr/bin/i686-w64-mingw32-g++-posix 30 --slave /usr/bin/i686-w64-mingw32-c++ i686-w64-mingw32-c++ /usr/bin/i686-w64-mingw32-c++-posix


_raw: update-alternatives 2026-01-09 09:50:54: run with --install /usr/bin/i686-w64-mingw32-gcc i686-w64-mingw32-gcc /usr/bin/i686-w64-mingw32-gcc-posix 30 --slave /usr/bin/i686-w64-mingw32-cpp i686-w64-mingw32-cpp /usr/bin/i686-w64-mingw32-cpp-posix --slave /usr/bin/i686-w64-mingw32-gcc-15 i686-w64-mingw32-gcc-15 /usr/bin/i686-w64-mingw32-gcc-15-posix --slave /usr/bin/i686-w64-mingw32-gcc-ar i686-w64-mingw32-gcc-ar /usr/bin/i686-w64-mingw32-gcc-ar-posix --slave /usr/bin/i686-w64-mingw32-gcc-nm i686-w64-mingw32-gcc-nm /usr/bin/i686-w64-mingw32-gcc-nm-posix --slave /usr/bin/i686-w64-mingw32-gcc-ranlib i686-w64-mingw32-gcc-ranlib /usr/bin/i686-w64-mingw32-gcc-ranlib-posix --slave /usr/bin/i686-w64-mingw32-gcov i686-w64-mingw32-gcov /usr/bin/i686-w64-mingw32-gcov-posix --slave /usr/bin/i686-w64-mingw32-gcov-dump i686-w64-mingw32-gcov-dump /usr/bin/i686-w64-mingw32-gcov-dump-posix --slave /usr/bin/i686-w64-mingw32-gcov-tool i686-w64-mingw32-gcov-tool /usr/bin/i686-w64-mingw32-gcov-tool-posix


_raw: update-alternatives 2026-01-09 09:50:54: run with --install /usr/bin/x86_64-w64-mingw32-gcc x86_64-w64-mingw32-gcc /usr/bin/x86_64-w64-mingw32-gcc-posix 30 --slave /usr/bin/x86_64-w64-mingw32-cpp x86_64-w64-mingw32-cpp /usr/bin/x86_64-w64-mingw32-cpp-posix --slave /usr/bin/x86_64-w64-mingw32-gcc-15 x86_64-w64-mingw32-gcc-15 /usr/bin/x86_64-w64-mingw32-gcc-15-posix --slave /usr/bin/x86_64-w64-mingw32-gcc-ar x86_64-w64-mingw32-gcc-ar /usr/bin/x86_64-w64-mingw32-gcc-ar-posix --slave /usr/bin/x86_64-w64-mingw32-gcc-nm x86_64-w64-mingw32-gcc-nm /usr/bin/x86_64-w64-mingw32-gcc-nm-posix --slave /usr/bin/x86_64-w64-mingw32-gcc-ranlib x86_64-w64-mingw32-gcc-ranlib /usr/bin/x86_64-w64-mingw32-gcc-ranlib-posix --slave /usr/bin/x86_64-w64-mingw32-gcov x86_64-w64-mingw32-gcov /usr/bin/x86_64-w64-mingw32-gcov-posix --slave /usr/bin/x86_64-w64-mingw32-gcov-dump x86_64-w64-mingw32-gcov-dump /usr/bin/x86_64-w64-mingw32-gcov-dump-posix --slave /usr/bin/x86_64-w64-mingw32-gcov-tool x86_64-w64-mingw32-gcov-tool /usr/bin/x86_64-w64-mingw32-gcov-tool-posix


_raw: update-alternatives 2026-01-09 09:50:54: link group x86_64-w64-mingw32-g++ updated to point to /usr/bin/x86_64-w64-mingw32-g++-win32


_raw: update-alternatives 2026-01-09 09:50:54: link group i686-w64-mingw32-g++ updated to point to /usr/bin/i686-w64-mingw32-g++-win32


_raw: 2026-01-09 09:50:53 status half-installed sliver:amd64 1.5.42-0kali1


_raw:
Selecting previously unselected package g++-mingw-w64-x86-64-posix.
Preparing to unpack .../10-g++-mingw-w64-x86-64-posix_15.2.0-7+28_amd64.deb ...
Unpacking g++-mingw-w64-x86-64-posix (15.2.0-7+28) ...
Selecting previously unselected package g++-mingw-w64-x86-64-win32.
Preparing to unpack .../11-g++-mingw-w64-x86-64-win32_15.2.0-7+28_amd64.deb ...
Unpacking g++-mingw-w64-x86-64-win32 (15.2.0-7+28) ...
Selecting previously unselected package g++-mingw-w64-x86-64.
Preparing to unpack .../12-g++-mingw-w64-x86-64_15.2.0-7+28_all.deb ...
Unpacking g++-mingw-w64-x86-64 (15.2.0-7+28) ...
Selecting previously unselected package g++-mingw-w64.
Preparing to unpack .../13-g++-mingw-w64_15.2.0-7+28_all.deb ...
Unpacking g++-mingw-w64 (15.2.0-7+28) ...
Selecting previously unselected package gcc-mingw-w64-i686.
Preparing to unpack .../14-gcc-mingw-w64-i686_15.2.0-7+28_all.deb ...
Unpacking gcc-mingw-w64-i686 (15.2.0-7+28) ...
Selecting previously unselected package gcc-mingw-w64-x86-64.


_raw:
[20260109-09:50:51] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20260109-09:50:51] [INFO ] ++ created session (access granted): username pentester, ip ::ffff:10.0.254.103:58319 - socket: 12
[20260109-09:50:51] [INFO ] starting Xorg session...
[20260109-09:50:51] [INFO ] Starting session: session_pid 229035, display :10.0, width 1920, height 1080, bpp 24, client ip ::ffff:10.0.254.103:58319 - socket: 12, user name pentester
[20260109-09:50:51] [INFO ] [session start] (display 10): calling auth_start_session from pid 229035
[20260109-09:50:51] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:50:51] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260109-09:50:51] [INFO ] Starting X server on display 10: /usr/lib/xorg/Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
[20260109-09:50:51] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:50:51] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:50:51] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:50:51] [INFO ] Session started successfully for user pentester on display 10
[20260109-09:50:51] [INFO ] Session in progress on display 10, waiting until the window manager (pid 229062) exits to end the session
[20260109-09:50:51] [INFO ] Starting the xrdp channel server for display 10
[20260109-09:50:51] [INFO ] Starting the default window manager on display 10: /etc/xrdp/startwm.sh


_raw:
[20260109-09:50:51] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:50:51] [INFO ] sesman connect ok
[20260109-09:50:51] [INFO ] sending login info to session manager. Please wait...
[20260109-09:50:51] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260109-09:50:51] [INFO ] login successful for user pentester on display 10
[20260109-09:50:51] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260109-09:50:51] [INFO ] started connecting
[20260109-09:50:51] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260109-09:50:51] [INFO ] lib_mod_log_peer: xrdp_pid=228400 connected to X11rdp_pid=229063 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.103 client_port=58319
[20260109-09:50:51] [INFO ] connected ok


_raw: [20260109-09:50:51] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 40130


_raw:
Selecting previously unselected package g++-mingw-w64-i686-posix.
Preparing to unpack .../05-g++-mingw-w64-i686-posix_15.2.0-7+28_amd64.deb ...
Unpacking g++-mingw-w64-i686-posix (15.2.0-7+28) ...
Selecting previously unselected package g++-mingw-w64-i686-win32.
Preparing to unpack .../06-g++-mingw-w64-i686-win32_15.2.0-7+28_amd64.deb ...
Unpacking g++-mingw-w64-i686-win32 (15.2.0-7+28) ...
Selecting previously unselected package g++-mingw-w64-i686.
Preparing to unpack .../07-g++-mingw-w64-i686_15.2.0-7+28_all.deb ...
Unpacking g++-mingw-w64-i686 (15.2.0-7+28) ...
Selecting previously unselected package gcc-mingw-w64-x86-64-posix-runtime.
Preparing to unpack .../08-gcc-mingw-w64-x86-64-posix-runtime_15.2.0-7+28_amd64.deb ...
Unpacking gcc-mingw-w64-x86-64-posix-runtime (15.2.0-7+28) ...
Selecting previously unselected package gcc-mingw-w64-x86-64-posix.
Preparing to unpack .../09-gcc-mingw-w64-x86-64-posix_15.2.0-7+28_amd64.deb ...
Unpacking gcc-mingw-w64-x86-64-posix (15.2.0-7+28) ...


_raw: 2026-01-09 09:50:46 status triggers-pending libc-bin:amd64 2.41-12


_raw:
Selecting previously unselected package asciinema.
(Reading database ...
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 449315 files and directories currently installed.)
Preparing to unpack .../00-asciinema_2.4.0-1_all.deb ...
Unpacking asciinema (2.4.0-1) ...
Selecting previously unselected package binutils-mingw-w64-ucrt64.
Preparing to unpack .../01-binutils-mingw-w64-ucrt64_2.45-7+12.1_amd64.deb ...
Unpacking binutils-mingw-w64-ucrt64 (2.45-7+12.1) ...
Selecting previously unselected package binutils-mingw-w64.
Preparing to unpack .../02-binutils-mingw-w64_2.45-7+12.1_all.deb ...
Unpacking binutils-mingw-w64 (2.45-7+12.1) ...
Selecting previously unselected package gcc-mingw-w64-i686-posix-runtime.
Preparing to unpack .../03-gcc-mingw-w64-i686-posix-runtime_15.2.0-7+28_amd64.deb ...
Unpacking gcc-mingw-w64-i686-posix-runtime (15.2.0-7+28) ...
Selecting previously unselected package gcc-mingw-w64-i686-posix.
Preparing to unpack .../04-gcc-mingw-w64-i686-posix_15.2.0-7+28_amd64.deb ...
Unpacking gcc-mingw-w64-i686-posix (15.2.0-7+28) ...


_raw: 2026-01-09 09:50:45 status half-installed gcc-mingw-w64-i686-posix-runtime:amd64 15.2.0-7+28


_raw: 2026-01-09 09:50:45 status half-installed binutils-mingw-w64:all 2.45-7+12.1


_raw: 2026-01-09 09:50:45 status half-installed binutils-mingw-w64-ucrt64:amd64 2.45-7+12.1


_raw: 2026-01-09 09:50:45 status unpacked asciinema:all 2.4.0-1


_raw: 2026-01-09 09:50:45 status triggers-pending kali-menu:all 2025.4.3


_raw: 2026-01-09 09:50:45 status half-installed asciinema:all 2.4.0-1


_raw: 2026-01-09 09:50:43 startup archives unpack


_raw:
[20260109-09:50:40] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:50:40] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:50:40] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:50:40] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:50:40] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:50:40] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:50:40] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:50:40] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:50:40] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:50:40] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:50:40] [INFO ] Non-TLS connection established from ::ffff:10.0.254.104 port 58589: with security level : high
[20260109-09:50:40] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:50:40] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:50:40] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:50:40] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:50:40] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:50:40] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:50:40] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: [20260109-09:50:40] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.104 port 58589


_raw:
[20260109-09:50:39] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:50:39] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:50:39] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:50:39] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:50:39] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260109-09:50:39] [ERROR] libxrdp_force_read: header read error
[20260109-09:50:39] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260109-09:50:39] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260109-09:50:39] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260109-09:50:39] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260109-09:50:39] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260109-09:50:39] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260109-09:50:39] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260109-09:50:41] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.103 port 58198
[20260109-09:50:41] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:50:41] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:50:41] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:50:41] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:50:41] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:50:41] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:50:41] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:50:41] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:50:41] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:50:41] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:50:41] [INFO ] Non-TLS connection established from ::ffff:10.0.254.103 port 58198: with security level : high
[20260109-09:50:41] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:50:41] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:50:41] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:50:41] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:50:41] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:50:41] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:50:41] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: [20260109-09:50:39] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.103 port 58197


_raw:
[20260109-09:50:31] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:50:31] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:50:31] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:50:31] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:50:31] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260109-09:50:31] [ERROR] libxrdp_force_read: header read error
[20260109-09:50:31] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260109-09:50:31] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260109-09:50:31] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260109-09:50:31] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260109-09:50:31] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260109-09:50:31] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260109-09:50:31] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260109-09:50:33] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.104 port 58096
[20260109-09:50:33] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:50:33] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:50:33] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:50:33] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:50:33] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:50:33] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:50:33] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:50:33] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:50:33] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:50:33] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:50:33] [INFO ] Non-TLS connection established from ::ffff:10.0.254.104 port 58096: with security level : high
[20260109-09:50:33] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:50:33] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:50:33] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:50:33] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:50:33] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:50:33] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:50:33] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: [20260109-09:50:31] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.104 port 58095


_raw:
[20260109-09:50:30] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:50:30] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:50:30] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:50:30] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:50:30] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260109-09:50:30] [ERROR] libxrdp_force_read: header read error
[20260109-09:50:30] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260109-09:50:30] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260109-09:50:30] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260109-09:50:30] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260109-09:50:30] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260109-09:50:30] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260109-09:50:30] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed


_raw: [20260109-09:50:30] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.104 port 58588


_raw:
[20260109-09:50:28] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20260109-09:50:28] [INFO ] ++ created session (access granted): username pentester, ip ::ffff:10.0.254.105:58230 - socket: 12
[20260109-09:50:28] [INFO ] starting Xorg session...
[20260109-09:50:28] [INFO ] Starting session: session_pid 228868, display :10.0, width 1920, height 1080, bpp 24, client ip ::ffff:10.0.254.105:58230 - socket: 12, user name pentester
[20260109-09:50:28] [INFO ] [session start] (display 10): calling auth_start_session from pid 228868
[20260109-09:50:28] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:50:28] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260109-09:50:29] [INFO ] Starting X server on display 10: /usr/lib/xorg/Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
[20260109-09:50:29] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:50:29] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:50:29] [INFO ] Session started successfully for user pentester on display 10
[20260109-09:50:29] [INFO ] Starting the xrdp channel server for display 10
[20260109-09:50:29] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:50:29] [INFO ] Starting the default window manager on display 10: /etc/xrdp/startwm.sh
[20260109-09:50:29] [INFO ] Session in progress on display 10, waiting until the window manager (pid 228895) exits to end the session


_raw:
[20260109-09:50:28] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:50:28] [INFO ] sesman connect ok
[20260109-09:50:28] [INFO ] sending login info to session manager. Please wait...
[20260109-09:50:28] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260109-09:50:28] [INFO ] login successful for user pentester on display 10
[20260109-09:50:28] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260109-09:50:28] [INFO ] started connecting
[20260109-09:50:28] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260109-09:50:29] [INFO ] lib_mod_log_peer: xrdp_pid=228475 connected to X11rdp_pid=228896 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.105 client_port=58230
[20260109-09:50:29] [INFO ] connected ok


_raw: [20260109-09:50:28] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 59926


_raw:
[20260109-09:50:25] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20260109-09:50:25] [INFO ] ++ created session (access granted): username pentester, ip ::ffff:10.0.254.102:58235 - socket: 12
[20260109-09:50:25] [INFO ] starting Xorg session...
[20260109-09:50:25] [INFO ] Starting session: session_pid 228846, display :10.0, width 1920, height 1080, bpp 24, client ip ::ffff:10.0.254.102:58235 - socket: 12, user name pentester
[20260109-09:50:25] [INFO ] [session start] (display 10): calling auth_start_session from pid 228846
[20260109-09:50:25] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:50:25] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260109-09:50:25] [INFO ] Starting X server on display 10: /usr/lib/xorg/Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
[20260109-09:50:25] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:50:25] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:50:25] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:50:25] [INFO ] Session started successfully for user pentester on display 10
[20260109-09:50:25] [INFO ] Session in progress on display 10, waiting until the window manager (pid 228873) exits to end the session
[20260109-09:50:25] [INFO ] Starting the xrdp channel server for display 10
[20260109-09:50:25] [INFO ] Starting the default window manager on display 10: /etc/xrdp/startwm.sh


_raw:
[20260109-09:50:25] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:50:25] [INFO ] sesman connect ok
[20260109-09:50:25] [INFO ] sending login info to session manager. Please wait...
[20260109-09:50:25] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260109-09:50:25] [INFO ] login successful for user pentester on display 10
[20260109-09:50:25] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260109-09:50:25] [INFO ] started connecting
[20260109-09:50:25] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260109-09:50:25] [INFO ] lib_mod_log_peer: xrdp_pid=228498 connected to X11rdp_pid=228874 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.102 client_port=58235
[20260109-09:50:25] [INFO ] connected ok


_raw: [20260109-09:50:25] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 32770


_raw:
[20260109-09:50:19] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20260109-09:50:19] [INFO ] ++ created session (access granted): username pentester, ip ::ffff:10.0.254.105:57994 - socket: 12
[20260109-09:50:19] [INFO ] starting Xorg session...
[20260109-09:50:19] [INFO ] Starting session: session_pid 228488, display :10.0, width 1920, height 1080, bpp 24, client ip ::ffff:10.0.254.105:57994 - socket: 12, user name pentester
[20260109-09:50:19] [INFO ] [session start] (display 10): calling auth_start_session from pid 228488
[20260109-09:50:19] [ERROR] sesman_data_in: scp_process_msg failed
[20260109-09:50:19] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20260109-09:50:19] [INFO ] Starting X server on display 10: /usr/lib/xorg/Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
[20260109-09:50:19] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:50:19] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:50:19] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20260109-09:50:19] [INFO ] Session started successfully for user pentester on display 10
[20260109-09:50:19] [INFO ] Starting the xrdp channel server for display 10
[20260109-09:50:19] [INFO ] Starting the default window manager on display 10: /etc/xrdp/startwm.sh
[20260109-09:50:19] [INFO ] Session in progress on display 10, waiting until the window manager (pid 228515) exits to end the session


_raw:
[20260109-09:50:19] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20260109-09:50:19] [INFO ] sesman connect ok
[20260109-09:50:19] [INFO ] sending login info to session manager. Please wait...
[20260109-09:50:19] [INFO ] xrdp_wm_log_msg: login successful for user pentester on display 10
[20260109-09:50:19] [INFO ] login successful for user pentester on display 10
[20260109-09:50:19] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20260109-09:50:19] [INFO ] started connecting
[20260109-09:50:19] [INFO ] lib_mod_connect: connecting via UNIX socket
[20260109-09:50:19] [INFO ] lib_mod_log_peer: xrdp_pid=228438 connected to X11rdp_pid=228516 X11rdp_uid=1001 X11rdp_gid=1001 client_ip=::ffff:10.0.254.105 client_port=57994
[20260109-09:50:19] [INFO ] connected ok


_raw: [20260109-09:50:19] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 40602


_raw:
[20260109-09:50:05] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:50:05] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:50:05] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:50:05] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:50:05] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20260109-09:50:05] [ERROR] libxrdp_force_read: header read error
[20260109-09:50:05] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20260109-09:50:05] [ERROR] [MCS Connection Sequence] receive connection request failed
[20260109-09:50:05] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20260109-09:50:05] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20260109-09:50:05] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20260109-09:50:05] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20260109-09:50:05] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20260109-09:50:07] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.102 port 58235
[20260109-09:50:07] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20260109-09:50:07] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20260109-09:50:07] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20260109-09:50:07] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20260109-09:50:07] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]
[20260109-09:50:07] [INFO ] Connected client computer name: CPTC11-FINALS-T
[20260109-09:50:07] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20260109-09:50:07] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20260109-09:50:07] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20260109-09:50:07] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20260109-09:50:07] [INFO ] Non-TLS connection established from ::ffff:10.0.254.102 port 58235: with security level : high
[20260109-09:50:07] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:50:07] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20260109-09:50:07] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:50:07] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:50:07] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20260109-09:50:07] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20260109-09:50:07] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file


_raw: [20260109-09:50:05] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:10.0.254.102 port 58234


_raw:
[20260109-09:50:01] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20260109-09:50:01] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20260109-09:50:01] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49


_raw:
[20260109-09:50:01] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20260109-09:50:01] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100


_raw: (lightdm-gtk-greeter:1158): Gtk-WARNING **: 09:50:00.982: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:959): Gtk-WARNING **: 09:50:00.980: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:50:00.957: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1153): Gtk-WARNING **: 09:50:00.950: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1149): Gtk-WARNING **: 09:50:00.948: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:946): Gtk-WARNING **: 09:50:00.945: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:50:00.934: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:50:00.932: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:50:00.901: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:50:00.830: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:50:00.817: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:50:00.815: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:50:00.800: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:50:00.766: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:934): Gtk-WARNING **: 09:50:00.759: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:50:00.755: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:50:00.721: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1319): Gtk-WARNING **: 09:50:00.720: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:938): Gtk-WARNING **: 09:50:00.715: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:50:00.683: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:944): Gtk-WARNING **: 09:50:00.673: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:932): Gtk-WARNING **: 09:50:00.664: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:50:00.662: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:941): Gtk-WARNING **: 09:50:00.589: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:961): Gtk-WARNING **: 09:50:00.555: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:936): Gtk-WARNING **: 09:50:00.544: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:944): Gtk-WARNING **: 09:50:00.543: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:961): Gtk-WARNING **: 09:50:00.524: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:969): Gtk-WARNING **: 09:50:00.521: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:940): Gtk-WARNING **: 09:50:00.503: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:50:00.500: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:938): Gtk-WARNING **: 09:50:00.488: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:50:00.482: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:50:00.456: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:1165): Gtk-WARNING **: 09:50:00.440: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:948): Gtk-WARNING **: 09:50:00.437: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:50:00.427: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:50:00.426: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:938): Gtk-WARNING **: 09:50:00.422: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:944): Gtk-WARNING **: 09:50:00.421: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:933): Gtk-WARNING **: 09:50:00.417: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:50:00.407: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:50:00.395: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:50:00.377: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:949): Gtk-WARNING **: 09:50:00.376: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:50:00.365: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:942): Gtk-WARNING **: 09:50:00.364: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:943): Gtk-WARNING **: 09:50:00.359: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:946): Gtk-WARNING **: 09:50:00.348: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:939): Gtk-WARNING **: 09:50:00.343: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:935): Gtk-WARNING **: 09:50:00.332: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:937): Gtk-WARNING **: 09:50:00.330: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)


_raw: (lightdm-gtk-greeter:946): Gtk-WARNING **: 09:50:00.329: Drawing a gadget with negative dimensions. Did you forget to allocate a size? (node menubar owner GreeterMenuBar)