A cursory search of metaU&L didn't show anything, so I am going to ask freshly:
Is there a policy with questions that seem to be looking for assistance with malicious code? I understand that we are supposed to presume good faith, but when someone is asking how to obfuscate calls to
os.system() with base64-encoded payloads and, when asked about it in a comment, replies (in part) "this is for command execution vulnerability", my presumption of good faith (which was admittedly weak to start with) wanes substantially.
Should such questions be flagged, ignored, or actually answered in a presumption of good faith?