ropshell> use 748499a8a4655bb9aaa788c2d39600fa (download)
name         : bronze_ropchain (i386/ELF)
base address : 0x8048240
total gadgets: 6870

ropshell> suggest "jmp"
> 0x080a8e96 : push esp; ret
> 0x08051837 : jmp eax
> 0x0805ec70 : jmp ebx
> 0x0804d9e1 : jmp ecx
> 0x0804dcef : jmp edx
> 0x08049a33 : jmp esi
> 0x0806b971 : jmp edi
> 0x0807b261 : jmp ebp
> 0x0807e5bf : jmp [eax]
> 0x08052f70 : jmp [ebx]
> 0x0807ba97 : jmp [ecx]
> 0x0804dafe : jmp [esi + 0x39]
> 0x08098aed : jmp [edi]
> 0x08072666 : jmp [ebp + 0x33]