The following question understandably popped up in the Hot Network Questions:
I have the ability to run arbitrary Python code on the 'apache' user. What damage can I do?
To my surprise, however, it basically boils down to "I was tipped off to a vulnerability, help me exploit it". Maybe It's just me, but it doesn't even come off as hypothetical. It doesn't seem, in the slightest, to be in the interest of securing the server, or covering up holes, but further breaking an already broken system.
Are questions like the above question on-topic? Are requests for help in exploiting security holes acceptable on security.SE?