I only had experience with ROP's on a few CTF's and I had GDB to get the addresses (and the ones of the libc). But I think you can't just enable debugging? The only other answer I can think is, that you dumped the memory chips