< Back





4. SQL injection UNION attack, finding a column containing text

We're asked to determine which columns are compatible with string data so we can leak data from the
original table. We use a UNION SELECT... to iteratively brute force the columns that are compatible
with string data.


Solution