ropshell> use 12b80a8fe3e65e55f46e9c9db412a96e (download)
name         : ret2libc (x86_64/ELF)
base address : 0x4004c0
total gadgets: 49

ropshell> suggest
call
    > 0x004005ae : call rax
    > 0x004005b5 : call [rbp + 0x48]
    > 0x00400679 : call [r12 + rbx*8]
jmp
    > 0x00400515 : jmp rax
load reg
    > 0x00400693 : pop rdi; ret
    > 0x00400520 : pop rbp; ret
    > 0x00400692 : pop r15; ret
    > 0x00400691 : pop rsi; pop r15; ret
    > 0x00400690 : pop r14; pop r15; ret
pop pop ret
    > 0x00400692 : pop r15; ret
    > 0x00400690 : pop r14; pop r15; ret
    > 0x0040068e : pop r13; pop r14; pop r15; ret
    > 0x0040068c : pop r12; pop r13; pop r14; pop r15; ret
    > 0x0040068b : pop rbp; pop r12; pop r13; pop r14; pop r15; ret
stack pivoting
    > 0x004005fe : leave ; ret