SQL injection UNION attack, finding a column containing text - Lab#04

In this walkthrough, I solve the SQL injection UNION attack lab focused on identifying which column supports string data in the application's SQL query.

🎯 Lab Objective:
Use a UNION-based SQL injection to inject a specific string value into the response, helping identify a column that accepts text.

🔧 Steps Covered:

Confirm column count from previous lab
Inject random string into different columns using UNION
Identify string-compatible column by observing app response
Prepare groundwork for full data extraction in future labs

📌 This technique is essential for retrieving sensitive string-based information like usernames, emails, or passwords.

#SQLInjection #WebSecurityAcademy #PortSwigger #UNIONAttack #EthicalHacking #BugBounty #InfoSec #OWASP #SQLi #CyberSecurity #PenTesting