SQL Injection - Lab #3 SQLi UNION attack determining the number of columns returned by the query

In this video, we cover Lab #3 in the SQL injection track of the Web Security Academy. This lab contains a SQL injection vulnerability in the product filter category field. This vulnerability can be exploited using a UNION attack to retrieve data from other tables. To solve the lab, we perform a SQL injection attack that determines the number of columns that are being returned by the query.This is the first step of a SQL injection UNION attack. We'll use this technique in subsequent labs to construct the full attack.

▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬

▬ Links ▬▬▬▬▬▬▬▬▬▬

[cryptohivemind]

This is really What I was looking for, I felt lost.. I was doing it just because someone said it should be like that... you actually explained WHY we were doing that..
brilliant.
I Wish the best for you!
thank you thank you!

[shurikensage]

You are really the best in SQL teaching. Thanks to David Bombal, that's where i saw you and also i have met you again in the portswigger labs

[VulnifyLabs]

tnx my sister you are one of the best teachers i ever seen

[baybars]

It is very nice that you explain the subject with the pre-solution sampling method and explain the question with more than one solution rather than one solution. I am starting to understand SQL better. Thank you for your hard work. Will there be a solution video for other issues after the SQLi series is over?

[王冠信-oc]

I want to say THANK YOU.
As a newbie in this field, I don't even know where to start and how the logic works.

With your explanation, I now understand and be ready for the next challenge :")

[ramkuruva]

As soon as I saw your first video, searched for the subscribe button ... Love from INDIA.. I am a newbie and felt so much comfortable, will continue to learn from all your videos only.

[yahyamrafe]

Wow, palestinian woman, who Explain a vulnerability best than any other one

thanks angel, grateful from Jordan

[LadyBear-ynfk]

You're a really good teacher, thank you!

[kumarniloy]

Love from Bangladesh
thank you very much for your work and sharing with us.

[myoaye]

Thanks for the great video, Rana. Really appreciate it for your effort! Please keep it up

[netoramospro]

Top demais a sua didática!! consegui fazer o laboratório! Gratidão

[allenxd]

Hey Rana! Hope you're well! just want to say I love your content! Very clear explanation!

Keep it up! subbed!

[MsDelta]

Thanks, Rana, for posting these series of burp-suite lab, very useful for me, the explained content is very precise and understandable, I will keep track of all them., Once again, thanks you very much., indeed

[Bllulls]

thank you!! what a amazing tutorial! the best by far!!

[nata-chita]

Thank you so much! You are just a Greate Teacher!

[themrkumar]

Why we need to know how many columns will be returned by the query. can we do sqli Union attack without knowing it ?

[anygsam]

Very suitable video for beginners, thanks

[christopherrodriguez]

Thank you so much for your videos. You are doing a Great service for the community.

[mahditabatabai]

thanks rana .such a hardwork and lovely teacher 🙏❤️

[TrevThorpe]

Thanks for the walk through, it was helpful for the project I am working on.