ropshell> use 7aaae57ca9ed695f6ae168db14086293 (download)
name         : libc.so.6 (i386/ELF)
base address : 0x1d1d0
total gadgets: 16141
ropshell> suggest "stack pivoting"
> 0x00056373 : xchg eax, esp; ret
> 0x00035263 : mov esp, ecx; jmp edx
> 0x00133132 : xchg esp, esi; call [eax - 0x18]
> 0x0001f8c4 : lea esp, [ebp - 0xc]; pop ebx; pop esi; pop edi; pop ebp; ret
> 0x000a5cf0 : xchg esp, ebp; int 0xfa; call [eax + 0x68]
> 0x000b4642 : xchg esp, eax; sar dl, 1; call [eax - 0x73]
> 0x000383a3 : xchg esp, ebx; mov cl, 0xfa; call [eax - 0x73]
> 0x0003e4e5 : xchg esp, edx; mov bl, 0xfa; call [eax - 0x73]
> 0x00065218 : xchg esp, edi; mov dh, 0xfa; call [eax - 0x18]
> 0x000cfa2b : lea esp, [esi + edi*8 - 1]; jmp [ebp - 0x75]
> 0x00067deb : lea esp, [ebx + edi*8 - 1]; call [ebx + 0x56]
> 0x0011840d : mov esp, edi; mov ebx, [ecx]; mov esi, [ecx + 4]; mov edi, [ecx + 8]; mov ebp, [ecx + 0xc]; nop ; jmp edx
> 0x00115fb6 : leave ; ret