ropshell> use 41c224382c3b6d995553bbe33db690c2 (download)
name         : vuln (x86_64/ELF)
base address : 0x400590
total gadgets: 40

ropshell> suggest
call
    > 0x004008fa : call [rsp + rbx*8]
    > 0x004008f9 : call [r12 + rbx*8]
jmp
    > 0x004005f1 : jmp rax
load reg
    > 0x00400913 : pop rdi; ret
    > 0x004005f8 : pop rbp; ret
    > 0x00400912 : pop r15; ret
    > 0x00400911 : pop rsi; pop r15; ret
    > 0x00400910 : pop r14; pop r15; ret
pop pop ret
    > 0x00400912 : pop r15; ret
    > 0x00400910 : pop r14; pop r15; ret
    > 0x0040090e : pop r13; pop r14; pop r15; ret
    > 0x0040090c : pop r12; pop r13; pop r14; pop r15; ret
    > 0x0040090b : pop rbp; pop r12; pop r13; pop r14; pop r15; ret
stack pivoting
    > 0x0040076f : leave ; ret