Use of Active Privileged Session

Use valid domain credentials to authenticate to an in-scope Windows target over SMB, enumerate its accessible shares, and, when an administrative share and remote service-control rights are available, open Impacket smbexec's semi-interactive shell to run a test command. This demonstrates one authenticated lateral-movement path on one host; share enumeration alone does not prove remote command execution will succeed.