ropshell> use b7bb0c7852f533334ee662034f534f7e (download) name : libc.so.6 (x86_64/ELF) base address : 0x212d0 total gadgets: 16852
ropshell> suggest "stack pivoting" > 0x00046d7e : xchg eax, esp; ret > 0x0011cfa7 : mov esp, edx; call rbp > 0x0011d580 : mov esp, esi; call r15 > 0x000e2da8 : lea rsp, [rbp - 0x10]; pop rbx; pop r12; pop rbp; ret > 0x000e2da9 : lea esp, [rbp - 0x10]; pop rbx; pop r12; pop rbp; ret > 0x0003edc9 : mov rsp, r8; mov rbp, r9; nop ; jmp rdx > 0x0003edca : mov esp, eax; mov rbp, r9; nop ; jmp rdx > 0x0014e9ba : lea esp, [rsp + 0x10]; call [rax] > 0x0004321b : lea esp, [rbx + rax*8 + 8]; nop ; call [rbx] > 0x0014b8ad : push rdi; pop rsp; lea rsi, [rdi + 0x48]; mov rdi, rax; mov rcx, [rcx + 0x18]; jmp rcx > 0x000f9157 : xchg esp, edx; sldt [rax]; lea rdi, [rip + 0xb7f9d]; movsxd rax, [rdi + rax*4]; add rax, rdi; jmp rax > 0x00054913 : leave ; ret