This question already has an answer here:

I've been learning different attack vectors using applications such as bWapp and others to further my practice and knowledge of cybersecurity.

I've stumbled across a problem in one of them. If Order By is not usable in error based SQL Injection, then what would you use?

Any help, preferably extremely detailed on why this is and what you can do to still get the number of columns as well as references and any other learning material that might further my understanding would be appreciated.

marked as duplicate by Tobi Nary, Xander, Community Feb 1 at 3:00

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

Browse other questions tagged or ask your own question.