CVE-2023-3897

This exploit bypasses CAPTCHA to enumerate valid users in SureMDM On-premise versions <= 6.31 by sending POST requests to the ForgotPassword endpoint and checking for a specific error message.

The repository contains a functional Python script that exploits CVE-2023-3897, a CAPTCHA bypass vulnerability in SureMDM On-premise versions <= 6.31, allowing user enumeration via error messages. The exploit sends POST requests to a specific endpoint and checks for a response indicating whether a user exists.