ropshell> use df5a910e823c4cc6d8ece5125481b3cc (download) name : libc6-i386_2.27-3ubuntu1_amd64.so (i386/ELF) base address : 0x18610 total gadgets: 16758
ropshell> suggest call > 0x00018ea1 : call eax > 0x0001e42f : call ebx > 0x0001a9f4 : call ecx > 0x00018f21 : call edx > 0x0001a0de : call esi jmp > 0x00078b06 : push esp; ret > 0x000191c3 : jmp eax > 0x00056aea : jmp ebx > 0x00019990 : jmp ecx > 0x0002a94f : jmp edx load mem > 0x00068517 : mov eax, [edx]; ret > 0x00132948 : mov eax, [edx + 4]; ret > 0x00074be3 : mov eax, [ecx]; mov [edx], eax; ret > 0x00074c19 : mov eax, [ecx + 8]; sub eax, edx; ret > 0x00107e32 : mov ebp, [ecx + 0xc]; jmp edx load reg > 0x00024a67 : pop eax; ret > 0x00018be5 : pop ebx; ret > 0x0002d17c : pop edx; ret > 0x00018706 : pop esi; ret > 0x0001869b : pop edi; ret pop pop ret > 0x00024a67 : pop eax; ret > 0x00153f7b : pop ebp; pop ebx; ret > 0x000ac387 : pop eax; pop edi; pop esi; ret > 0x0003ff3a : pop eax; pop ebx; pop esi; pop edi; ret > 0x0001c6c3 : pop esp; pop ebx; pop esi; pop edi; pop ebp; ret sp lifting > 0x00133ae1 : add esp, 0x10; ret > 0x00133ae1 : add esp, 0x10; ret > 0x00162bb2 : add esp, 0x20; ret > 0x000f0140 : add esp, 0x3c; ret > 0x000e7525 : add esp, 0x4c; ret stack pivoting > 0x000195c2 : xchg eax, esp; ret > 0x000dbf5c : xchg esp, eax; ret > 0x000dea4b : xchg esp, edx; ret > 0x0002d24d : mov esp, ecx; jmp edx > 0x0013d8db : mov esp, edi; jmp [esi - 0x70] syscall > 0x000beb75 : call gs:[0x10]; ret write mem > 0x000971cc : add [eax], edx; ret > 0x000971ec : add [eax], esi; ret > 0x00081cf0 : add [eax], edi; ret > 0x0005a8b5 : add [ecx], eax; ret > 0x0003eaa2 : add [ecx], edi; ret