ropshell> use 8e66be0a3125f7c3c5a2d303da18c35c (download)
name         : libc.so.6 (x86_64/ELF)
base address : 0x287c0
total gadgets: 17230
ropshell> suggest
call
    > 0x0002c515 : call rax
    > 0x0002b396 : call rbx
    > 0x0002a73f : call rcx
    > 0x0003b49e : call rdx
    > 0x0002a6f0 : call rsi
jmp
    > 0x00056431 : push rsp; ret
    > 0x0002a880 : jmp rax
    > 0x000a2875 : jmp rbx
    > 0x0007ceb4 : jmp rcx
    > 0x00043148 : jmp rdx
load mem
    > 0x0008ff10 : mov eax, [rdx]; ret
    > 0x000f6654 : mov eax, [rdi]; ret
    > 0x0009ef34 : mov rax, [rdi + 0x68]; ret
    > 0x001684d1 : mov eax, [rdx + 8]; ret
    > 0x0015e574 : mov eax, [rdi + 0x20]; ret
load reg
    > 0x000e5dc7 : pop rax; ret
    > 0x0005c4f4 : pop rbx; ret
    > 0x00125a8b : pop rcx; ret
    > 0x0005c2e7 : pop rsi; ret
    > 0x0011bc7a : pop rdi; ret
pop pop ret
    > 0x0005c2e6 : pop r14; ret
    > 0x0005c2e4 : pop r12; pop r14; ret
    > 0x0011cf36 : pop r12; pop r13; pop r14; ret
    > 0x0011bc73 : pop r12; pop r13; pop r14; pop r15; ret
    > 0x00134d3c : pop r11; pop r12; pop r13; pop r14; pop rbp; ret
sp lifting
    > 0x0011b18f : add rsp, 0x18; ret
    > 0x0011b18f : add rsp, 0x18; ret
    > 0x0011ce25 : add rsp, 0x28; ret
    > 0x0013b1aa : add rsp, 0x38; ret
    > 0x0013b20b : add rsp, 0x40; ret
stack pivoting
    > 0x0006310f : mov rsp, rdx; ret
    > 0x00048777 : xchg eax, esp; ret
    > 0x00063110 : mov esp, edx; ret
    > 0x0007e4a9 : mov esp, edi; jmp rcx
    > 0x00171e8b : lea rsp, [rbp - 0x10]; pop rbx; pop r12; pop rbp; ret
syscall
    > 0x000a0be6 : syscall ; ret
    > 0x00097d7b : int 0x80; cmp esi, 2; cmove eax, ecx; mov [rdi], eax; mov eax, edx; ret
write mem
    > 0x000c278c : adc [rcx], eax; ret
    > 0x00075568 : add [rcx], edi; ret
    > 0x00066569 : add [rcx], ebp; ret
    > 0x0012b786 : add [rsi], ecx; ret
    > 0x000abbbf : add [rdi], rax; ret