ropshell> use acf9024b29f188c594076f4a2100b654 (download)
name         : vuln (i386/ELF)
base address : 0x8048520
total gadgets: 38

ropshell> suggest
call
    > 0x080485a0 : call eax
    > 0x080485ed : call edx
    > 0x08048542 : call [eax + 0x51]
jmp
    > 0x08048551 : push esp; mov ebx, [esp]; ret
load reg
    > 0x08048649 : pop ebp; ret
    > 0x080488fa : pop edi; pop ebp; ret
    > 0x080488f9 : pop esi; pop edi; pop ebp; ret
    > 0x0804888e : mov eax, [esp]; ret
    > 0x08048553 : mov ebx, [esp]; ret
pop pop ret
    > 0x08048649 : pop ebp; ret
    > 0x080488fa : pop edi; pop ebp; ret
    > 0x080488f9 : pop esi; pop edi; pop ebp; ret
    > 0x080488f8 : pop ebx; pop esi; pop edi; pop ebp; ret
stack pivoting
    > 0x080485a5 : leave ; ret