ropshell> use 11d0565d6b79cbb182f472cfa1e34be0 (download) name : rop (i386/ELF) base address : 0x8048240 total gadgets: 6838
ropshell> suggest "stack pivoting" > 0x08048f56 : xchg eax, esp; ret > 0x080a8a63 : mov esp, ecx; ret > 0x08048919 : lea esp, [ecx - 4]; ret > 0x0809fbe8 : lea esp, [ebp - 8]; pop ebx; pop esi; pop ebp; ret > 0x080a0555 : xchg esp, esp; cld ; jmp [esi - 0x70] > 0x080a0555 : xchg esp, esp; cld ; jmp [esi - 0x70] > 0x0807d9f0 : lea esp, [edi + esi*8 - 1]; call [ebx - 0x7d]; ret > 0x08087c6d : lea esp, [eax]; idiv edi; jmp [ebp - 0x75] > 0x0806bc8d : lea esp, [edx - 3]; call [edx + 0x56] > 0x0808cc96 : lea esp, [ebx + edi*8 - 1]; call [edx - 0x18] > 0x080487b5 : leave ; ret