With reference to Blind SQL Injection as well as time-based and error messages techniques
is there any other trick an attacker can exploit?

I'm doing a bit of research in the field of Blind SQL Injection but I haven't been able to find any other approach which can be classified as Blind SQL Injection.

Thanks a lot.