ropshell> use e7f8665936ee7011654bea6aca0c6d06 (download)
name         : ret2syscall (i386/ELF)
base address : 0x80482b0
total gadgets: 6731
ropshell> suggest "stack pivoting"
> 0x0804b2f4 : xchg eax, esp; ret
> 0x080bb3f6 : mov esp, ecx; ret
> 0x080bb465 : mov esp, ebp; pop ebp; ret
> 0x0806db68 : xchg ebx, esp; add es:[eax], al; ret
> 0x08092255 : lea esp, [ebp - 8]; pop ebx; pop esi; pop ebp; ret
> 0x0804b001 : lea esp, [edi + edi*8 - 1]; jmp [esi - 0x7b]
> 0x08048d68 : leave ; ret