---
id: 8231
title: "Hacking SQL Server Stored Procedures – Part 2: User Impersonation"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/network-pentesting/hacking-sql-server-stored-procedures-part-2-user-impersonation/"
published_at: "2014-12-08T00:00:00Z"
tags: ["privilege-escalation", "powershell", "metasploit", "sql-server", "execute-as", "impersonate"]
phying_url: "https://phying.com/item/8231"
lang: en
---

# Hacking SQL Server Stored Procedures – Part 2: User Impersonation

## Summary

This lab walkthrough shows how the IMPERSONATE privilege lets low-privileged SQL Server logins escalate to sysadmin through EXECUTE AS configurations, automated with Metasploit and PowerShell.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2014-12-08T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/network-pentesting/hacking-sql-server-stored-procedures-part-2-user-impersonation/
- **Phying News:** https://phying.com/item/8231