MSSQLScanner is a multithreaded java based dictionary attack tool with the capability of spawning an SQL Query Shell and xp_cmdshell for pentesting your MS SQL Database server.
http://www.theprojectxblog.net/mssql-scanner-pentesting-tool/