Impacket’s psexec.py offers psexec like functionality. This will give you an interactive shell on the Windows host. psexec.py also allows using Service Tickets, saved as a ccache file for Authentication. It can be obtained via Impacket’s GetST.py
Command Reference:
Target IP: 10.10.10.1
Domain: test.local
Username: test
export KRB5CCNAME=/full/path/to/test.ccache; python3 psexec.py test.local/test@10.10.10.1 -k -no-pass