ropshell> use 6f6ac2a47872e489bf38639a5101127a (download)
name         : target7 (i386/ELF)
base address : 0x80490a0
total gadgets: 7663

ropshell> suggest "stack pivoting"
> 0x0804a70c : xchg eax, esp; ret
> 0x080ad5a9 : mov esp, ecx; ret
> 0x08049ebd : lea esp, [ecx - 4]; ret
> 0x080a4728 : lea esp, [ebp - 8]; pop ebx; pop esi; pop ebp; ret
> 0x0805257a : xchg esp, edx; sbb ch, bh; call [eax - 0x18]
> 0x0809ceee : xchg esp, edi; cmp bh, dh; call [eax + 0x56]
> 0x08049a65 : leave ; ret