ropshell> use 676af3657767cef877136f12ff2fb2d6 (download)
name         : rop_train (i386/ELF)
base address : 0x8049090
total gadgets: 6950

ropshell> suggest "jmp"
> 0x080a856a : push esp; ret
> 0x08052817 : jmp eax
> 0x08049957 : jmp ebx
> 0x0805e976 : jmp ecx
> 0x0804ebfa : jmp edx
> 0x0804a3dd : jmp esi
> 0x0804aba4 : jmp edi
> 0x0804ed58 : jmp ebp
> 0x0807f17c : jmp [eax]
> 0x08053d65 : jmp [ebx]
> 0x0805eabe : jmp [ecx]
> 0x0808704c : jmp [esi + 0x25]
> 0x0809d99a : jmp [edi + 0x6d]
> 0x0807c6bf : jmp [ebp + 3]