The word “exploit” may be doing a lot of work here. In my experience Opus 4.6 is perfectly happy to provide test cases that trigger ASAN, even without the super secret squirrel security access.
But if you ask it to get you a shell it’ll probably tell you to get lost.
I don't have any special certification or arrangement with Anthropic; this is vanilla Opus 4.x via Claude Code.