SQL Union Attack - Determining the Number of Columns Returned by the Query

This lab was provided by the burp suite web security academy for learning SQL injection union injection attacks.

The task is 'determining the number of columns returned by the query'.

It's technically a type of 'blind' sql injection attack since we are extracting data through looking at http status codes.

sql injection z3nsh3ll zenshell blind sql injection sql union attack determining the number of colums returned by the query sql