Sorry if this is a very amateur question.
I was checking out some article regarding CAPTCHA bypassing. And I though this article seemed interesting http://blog.opensecurityresearch.com/2012/08/bypassing-captchas-by-impersonating.html
this attack redirects the request from the Server(which is the client for the CAPTCHA provider) to an attacker controlled server.
If I'm using a cURL(or something) to post my request internally this cannot be detected by my Client PC right? So, is it even possible?