Blind SQL Injection - A brief introduction

SQL Injection can sometimes be as simple as '0 UNION SELECT * FROM users;-- and suddenly you end up with a dump of the users table in a web application. But what happens when your output isn't reflected back to you? Can we still exploit the unvalidat...