---
id: 8227
title: "Hacking SQL Server Stored Procedures – Part 3: SQL Injection"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/network-pentesting/hacking-sql-server-stored-procedures-part-3-sqli-and-user-impersonation/"
published_at: "2015-01-12T00:00:00Z"
tags: ["privilege-escalation", "sql-injection", "sql-server", "stored-procedures", "execute-as"]
phying_url: "https://phying.com/item/8227"
lang: en
---

# Hacking SQL Server Stored Procedures – Part 3: SQL Injection

## Summary

SQL injection inside stored procedures using dynamic SQL can escalate to sysadmin when procedures run with elevated privileges via WITH EXECUTE AS or certificate signing, as this walkthrough shows.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2015-01-12T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/network-pentesting/hacking-sql-server-stored-procedures-part-3-sqli-and-user-impersonation/
- **Phying News:** https://phying.com/item/8227