Discovering and exploiting a brute-forceable password reset flaw on a website using a Python script.