ropshell> use 51ee1a76f55f7a2d8f5fd28b856f455b (download)
name         : vuln (i386/ELF)
base address : 0x8048240
total gadgets: 6851
ropshell> suggest "stack pivoting"
> 0x08048f86 : xchg eax, esp; ret
> 0x080a9063 : mov esp, ecx; ret
> 0x0804893d : lea esp, [ecx - 4]; ret
> 0x080a01e8 : lea esp, [ebp - 8]; pop ebx; pop esi; pop ebp; ret
> 0x0807e000 : lea esp, [edi + esi*8 - 1]; call [ebx - 0x7d]; ret
> 0x0808827d : lea esp, [eax]; idiv edi; jmp [ebp - 0x75]
> 0x080982b9 : xchg esp, esi; cmp dh, bh; call [eax - 0x18]
> 0x0808d2a6 : lea esp, [ebx + edi*8 - 1]; call [edx - 0x18]
> 0x080487b5 : leave ; ret