ropshell> use dc6abed98572f9e74390316f9d122aca (download)
name         : libc-2.24.so (x86_64/ELF)
base address : 0x1f940
total gadgets: 16048
ropshell> suggest "stack pivoting"
> 0x0007d81f : xchg eax, esp; ret
> 0x000e5534 : mov esp, edx; call rbp
> 0x00032e48 : mov rsp, r8; mov rbp, r9; jmp rdx
> 0x000351e1 : lea rsp, [rbp - 0x10]; pop rbx; pop r12; pop rbp; ret
> 0x00032e49 : mov esp, eax; mov rbp, r9; jmp rdx
> 0x000351e2 : lea esp, [rbp - 0x10]; pop rbx; pop r12; pop rbp; ret
> 0x000e4884 : xchg edi, esp; add [rax], al; add [rax - 0x7d], cl; ret
> 0x0006698d : mov rsp, rbx; lea rsp, [rbp - 0x18]; pop rbx; pop r12; pop r13; pop rbp; ret
> 0x0006698e : mov esp, ebx; lea rsp, [rbp - 0x18]; pop rbx; pop r12; pop r13; pop rbp; ret
> 0x00076d58 : mov esp, esi; xor edi, edi; mov r13, rdx; call [r14]
> 0x000a8151 : mov esp, edi; mov rsi, rdx; mov rdi, rbp; sub rsp, 8; call r12
> 0x00109fdd : push rdi; pop rsp; lea rsi, [rdi + 0x48]; mov rdi, rax; mov rcx, [rcx + 0x18]; jmp rcx
> 0x0011642f : lea esp, [rbx + 0x10]; mov [rbx + 0x10], 0; mov rdi, r12; call [rax + 0x28]
> 0x0003c795 : leave ; ret