ropshell> use 676af3657767cef877136f12ff2fb2d6 (download)
name         : rop_train (i386/ELF)
base address : 0x8049090
total gadgets: 6950

ropshell> suggest "stack pivoting"
> 0x0804a067 : xchg eax, esp; ret
> 0x08049ba6 : lea esp, [ecx - 4]; ret
> 0x080a03dd : mov esp, ecx; jmp edx
> 0x0806b11d : lea esp, [edi - 8]; pop edi; ret
> 0x080a1678 : lea esp, [ebp - 8]; pop ebx; pop esi; pop ebp; ret
> 0x08050fd5 : xchg edx, esp; add [eax], eax; pop ebx; mov eax, ecx; pop esi; pop edi; ret
> 0x08049a16 : leave ; ret