ropshell> use 748499a8a4655bb9aaa788c2d39600fa (download)
name         : bronze_ropchain (i386/ELF)
base address : 0x8048240
total gadgets: 6870

ropshell> suggest "stack pivoting"
> 0x08048fd6 : xchg eax, esp; ret
> 0x080a90b3 : mov esp, ecx; ret
> 0x0804899b : lea esp, [ecx - 4]; ret
> 0x080a0238 : lea esp, [ebp - 8]; pop ebx; pop esi; pop ebp; ret
> 0x0807e0c0 : lea esp, [edi + esi*8 - 1]; call [ebx - 0x7d]; ret
> 0x0808833d : lea esp, [eax]; idiv edi; jmp [ebp - 0x75]
> 0x0808d366 : lea esp, [ebx + edi*8 - 1]; call [edx - 0x18]
> 0x080487b5 : leave ; ret