I grabbed the password hash from a domain's Groups.xml file and decrypted the hash. However the decrypted password contains characters "%" and "^", and I'm having problems using it with winexe. No matter what I try, it tells me the credentials are incorrect. I'm trying:
winexe -U Administrator%test^pass%1234 //lab-host-ip "cmd"
I escaped both characters using \^ and \% but it still gives me an authentication error. I tried double and single quotes but no luck. What am I doing wrong?