ropshell> use 640898444e80231739faf69b303b77b9 (download)
name         : pwn_notes (i386/ELF)
base address : 0x80482b0
total gadgets: 6844

ropshell> suggest "stack pivoting"
> 0x0804946a : xchg eax, esp; ret
> 0x080ba282 : mov esp, ecx; ret
> 0x080490fe : lea esp, [ecx - 4]; ret
> 0x0804b692 : lea esp, [ebp - 0xc]; pop ebx; pop esi; pop edi; pop ebp; ret
> 0x0808e91f : lea esp, [edx + edi*8 - 1]; jmp [esi - 0x77]
> 0x080488b9 : leave ; ret