Crown Jewel Access via Poor Segmentation / Lack of Jump Hosts

In a poorly segmented internal Windows network without a controlled management path, an operator with valid credentials and network reachability may move laterally through remote services. This example checks SMB and WinRM reachability, then uses either an interactive WinRM session or PsExec over SMB; those execution paths are alternatives, not a required sequence.