ropshell> use 4abca1587a14b407ec6e21b6fc4f28ec (download) name : babyrop_level6.0 (x86_64/ELF) base address : 0x4011f0 total gadgets: 51
ropshell> suggest call > 0x0040268a : call [rdi + rbx*8] > 0x00402689 : call [r15 + rbx*8] > 0x004014cc : call [rax - 0x179a72b8]; pop rbx; pop r12; pop r13; pop rbp; ret jmp > 0x0040124c : jmp rax load reg > 0x00402456 : pop rcx; ret > 0x00402446 : pop rdx; ret > 0x0040245e : pop rsi; ret > 0x0040244e : pop rdi; ret > 0x004012bd : pop rbp; ret pop pop ret > 0x004026a2 : pop r15; ret > 0x004014d5 : pop r13; pop rbp; ret > 0x004014d3 : pop r12; pop r13; pop rbp; ret > 0x0040269c : pop r12; pop r13; pop r14; pop r15; ret > 0x0040269b : pop rbp; pop r12; pop r13; pop r14; pop r15; ret stack pivoting > 0x004014ce : lea rsp, [rbp - 0x18]; pop rbx; pop r12; pop r13; pop rbp; ret > 0x004014cf : lea esp, [rbp - 0x18]; pop rbx; pop r12; pop r13; pop rbp; ret > 0x004016cb : leave ; ret