BIG issue with website login APIs

I made a python script that can brute force user accounts using the website APIs. I’m only 17 and this took me 15 min to do. It fully gets through captcha and can get all user info. I see people doing this all the time and it hurts me! So here I am making it better!! Hope we can work together?