> Markdown version of [/events/world-congress-2026-north-america/sessions/1775-hacking-mssql-on](https://www.wearedevelopers.com/events/world-congress-2026-north-america/sessions/1775-hacking-mssql-on). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.


- **Event:** World Congress 2026 North America

## Description

It started as a simple security research project on a local SQL Server instance. A single vulnerability led me down a rabbit hole from compromising Azure SQL Database to successfully escalating privileges on GCP CloudSQL for SQL Server, Amazon RDS, and Alibaba ApsaraDB.

In this session, I’ll walk you through the techniques I used to escalate from a limited user to sysadmin on managed SQL Server platforms offered by the four biggest cloud providers. I’ll also demonstrate post-exploitation techniques, including how I retrieved plaintext [sa] passwords from internal logs and accessed highly sensitive internal metadata.

More importantly, I’ll share lessons on how these vulnerabilities were possible in the first place and what you, as a developer, DBA, or security professional, can do to secure your applications against similar attack vectors.

Finally, I’ll share how each cloud provider responded to the vulnerabilities I disclosed, the remediation timelines, and the broader lessons this experience teaches us about cloud security.

## Speaker

### [Fabiano Amorim](https://www.wearedevelopers.com/@fabiano-amorim)

Pythian - Principal Consultant


## Related talks at this congress

- [Know Your Enemies: Live Exploit of a PHP Engine Security Breach](https://www.wearedevelopers.com/events/world-congress-2026-north-america/sessions/1420-know-your-enemies) — Alexandre Daubois
- [It passed auth, then production caught fire](https://www.wearedevelopers.com/events/world-congress-2026-north-america/sessions/1703-it-passed-auth-then) — Alex Olivier
- [The Things Your AI Isn't Telling You](https://www.wearedevelopers.com/events/world-congress-2026-north-america/sessions/1710-the-things-your-ai) — Desmond Lamptey
- [Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale](https://www.wearedevelopers.com/events/world-congress-2026-north-america/sessions/1432-securing-ai-agent) — Abdel Fane

## Watch remotely

Can’t make it to San José? Watch this session live with Pro. You also get:

- All full videos, bookmarks, and playlists
- World Congress livestreams

[See pricing](https://www.wearedevelopers.com/pricing)

## Links

- [Get tickets](https://www.wearedevelopers.com/world-congress-north-america/tickets)