Impacket

Remote connection

Psexec

The tool creates a remote service by uploading a randomly-named executable to the ADMIN$ share on the target host.

psexec.py qu35t.pw/qu35t:'Password1!'@10.10.10.10

Wmiexec

getTGT

getTGT.py qu35t.pw/qu35t
export KRBCCNAME=qu35t.ccache