ropshell> use 60020614789003b892b279a3544fd4a8 (download)
name         : libc.so.6 (i386/ELF)
base address : 0x18690
total gadgets: 16657

ropshell> suggest "stack pivoting"
> 0x0003e20a : xchg eax, esp; ret
> 0x0002d43d : mov esp, ecx; jmp edx
> 0x00040f18 : lea esp, [ebp - 8]; pop ebx; pop esi; pop ebp; ret
> 0x000c238f : lea esp, [ebx + edi*8 - 1]; call [ebx - 0x18]
> 0x00059769 : lea esp, [edx + edi*8 - 1]; call [esi - 0x18]
> 0x000dd768 : lea esp, [esi + edi*8 - 1]; call [edx - 0x46]
> 0x000b5abd : xchg ebp, esp; sbb eax, [eax]; add [ebx - 0x877b], cl; inc [ebx]; test [eax - 0x5d3c8], bl; jmp eax
> 0x00142854 : lea esp, [edi + edi*8]; inc [ecx + 0x418c8c3]; add [ebx], al; sbb al, 0x8b; jmp ebx
> 0x000579a7 : xchg esp, edx; sldt [eax]; mov eax, [ebp - 0x590]; movzx edx, dl; add eax, [eax + edx*4 - 0x5f2a8]; jmp eax
> 0x00107df8 : mov esp, edi; mov ebx, [ecx]; mov esi, [ecx + 4]; mov edi, [ecx + 8]; mov ebp, [ecx + 0xc]; jmp edx
> 0x00104ed2 : leave ; ret