One will need creative thinking to tackle some of the vulnerabilties in the CBBH exam. None of the targets would be expliotable with just running automated tools. There’s also the extra difficulty of “chaining” vulns. I found the following video nicely explain “Creative thinking” by Professor Po-Shen from the Carnegie Mellon University.

How to be a creative thinker | Carnegie Mellon University Po-Shen Loh