Exploitation

After cracking the TGT of the user svc-alfresco I was able to get a shell through evil-winrm.