ropshell> use 6e1a6efe89bfd9b646baea1aba7d4ba1 (download)
name         : vuln (x86_64/ELF)
base address : 0x401090
total gadgets: 46

ropshell> suggest
call
    > 0x00401292 : call [rsi + rsi*2]
    > 0x004012fa : call [rdi + rbx*8]
    > 0x004012f9 : call [r15 + rbx*8]
jmp
    > 0x004010ee : jmp rax
load reg
    > 0x00401176 : pop rax; ret
    > 0x00401178 : pop rdx; ret
    > 0x00401313 : pop rdi; ret
    > 0x0040115d : pop rbp; ret
    > 0x00401312 : pop r15; ret
pop pop ret
    > 0x00401312 : pop r15; ret
    > 0x00401310 : pop r14; pop r15; ret
    > 0x0040130e : pop r13; pop r14; pop r15; ret
    > 0x0040130c : pop r12; pop r13; pop r14; pop r15; ret
    > 0x0040130b : pop rbp; pop r12; pop r13; pop r14; pop r15; ret
stack pivoting
    > 0x004012a7 : leave ; ret
syscall
    > 0x0040117a : syscall ; ret