information_schema is the map. Enumerate schemata, tables and columns before extracting.

Enumerating the schema

Once you can read arbitrary queries, map the target before you loot it. The database keeps a catalogue of itself in information_schema, and you read it with the same UNION you already know.