ropshell> use ceb3c6477662a97134986a305ba814ad (download)
name         : libc.so.6 (x86_64/ELF)
base address : 0x243c0
total gadgets: 15660

ropshell> suggest
call
    > 0x00025e06 : call rax
    > 0x0002be56 : call rbx
    > 0x0003461c : call rcx
    > 0x00034c50 : call rdx
    > 0x00025ea2 : call rsi
jmp
    > 0x00032abe : push rsp; ret
    > 0x00026043 : jmp rax
    > 0x001577ed : jmp rbx
    > 0x00032a94 : jmp rcx
    > 0x0002a1bf : jmp rdx
load mem
    > 0x00081d40 : mov eax, [rdx]; ret
    > 0x000e2034 : mov eax, [rdi]; ret
    > 0x0008ed94 : mov rax, [rdi + 0x68]; ret
    > 0x00144a11 : mov eax, [rdx + 8]; ret
    > 0x0013b3f4 : mov eax, [rdi + 0x20]; ret
load reg
    > 0x000d2cb7 : pop rax; ret
    > 0x00051bc4 : pop rbx; ret
    > 0x0009fe8e : pop rcx; ret
    > 0x00101ddb : pop rsi; ret
    > 0x0002493d : pop rdi; ret
pop pop ret
    > 0x00101c17 : pop r12; ret
    > 0x000519b3 : pop r12; pop r13; ret
    > 0x00101dd6 : pop r12; pop r13; pop r14; ret
    > 0x00100acf : pop r12; pop r13; pop r14; pop r15; ret
    > 0x001172ac : pop r11; pop r12; pop r13; pop r14; pop rbp; ret
sp lifting
    > 0x000fff8f : add rsp, 0x18; ret
    > 0x000fff8f : add rsp, 0x18; ret
    > 0x0011d63a : add rsp, 0x38; ret
    > 0x0011d69b : add rsp, 0x40; ret
stack pivoting
    > 0x00057aef : mov rsp, rdx; ret
    > 0x0003fb27 : xchg eax, esp; ret
    > 0x00057af0 : mov esp, edx; ret
    > 0x0007295b : mov esp, esi; jmp rdx
    > 0x00072b81 : mov esp, edi; jmp rdx
syscall
    > 0x00090cb6 : syscall ; ret
    > 0x0008926b : int 0x80; cmp esi, 2; cmove eax, ecx; mov [rdi], eax; mov eax, edx; ret
write mem
    > 0x000b088c : adc [rcx], eax; ret
    > 0x00092378 : add [rcx], edi; ret
    > 0x001081c5 : add [rcx], ebp; ret
    > 0x0003c8ec : adc [rdx], ecx; ret
    > 0x0009ba6f : add [rdi], rax; ret