# Exam Hints/Tips

<figure><img src="https://415622559-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXHw7WlXiyz4DjLZYjBRX%2Fuploads%2FAphO5fRkZLv6fuoTzOOu%2Fimage.png?alt=media&#x26;token=c5fdaa01-f7a7-4e20-91fd-f78c27e540c5" alt=""><figcaption></figcaption></figure>

&#x20;if the stage 1 exploit was non interactive then this can be used to obtain administrator interaction by her clicking on the link to change their password. Note to check the `source code` of the change email page for any additional form id values.
