ropshell> use e7f8665936ee7011654bea6aca0c6d06 (download) name : ret2syscall (i386/ELF) base address : 0x80482b0 total gadgets: 6731
ropshell> suggest "stack pivoting" > 0x0804b2f4 : xchg eax, esp; ret > 0x080bb3f6 : mov esp, ecx; ret > 0x080bb465 : mov esp, ebp; pop ebp; ret > 0x0806db68 : xchg ebx, esp; add es:[eax], al; ret > 0x08092255 : lea esp, [ebp - 8]; pop ebx; pop esi; pop ebp; ret > 0x0804b001 : lea esp, [edi + edi*8 - 1]; jmp [esi - 0x7b] > 0x08048d68 : leave ; ret