This question already has an answer here:
Login to website behind captcha seeks to circumvent a captcha. I think that white-hat hacking or penetration testing for the purpose of security improvement might be OK, but this is clearly in the opposite category: exploitation for its own sake. Is this on-topic? Is it OK to be teaching people how to circumvent security, anti-tamper or anti-abuse systems such as captchas?