I don't have it in the context of an escalation, but if they can get the databas...

		simcop2387 on May 6, 2013 \| parent \| context \| favorite \| on: Honeywords: Making password-cracking detectable I don't have it in the context of an escalation, but if they can get the database to make a new stored procedure, http://www.mssqltips.com/sqlservertip/1263/accessing-the-win... then they can usually do a very large amount of things