impacket-wmiexec

WMI-based remote command execution (authorized testing only).

$ impacket-wmiexec corp/operator:'Pw'@10.0.0.5
$ impacket-wmiexec -hashes :NTHASH corp/operator@10.0.0.5