#
wmiexec.py
wmiexec is part of impacket.
#
Connecting to a host using Kerberos auth
You'll want to have already set the ccache file with
export KRB5CCNAME=someaccount.ccache
Then:
wmiexec.py -k -no-pass VICTIMSYSTEM -debug