Spray credential across a network looking for SMB shares that can be logged in to:

crackmapexec smb $BROADCAST/$SUBNET_MASK -u $USERNAME -p $PASSWORD