SQLdict is a basic single ip brute-force MS SQL
Server password utility that can carry out a dictionary attack against a
named SQL account.
SQLdict is available from
The use of this tool is simple you just specify the IP address you are
attacking, the user account you are up against and then load an
appropriate wordlist to try via the Load Password File button
As you can see from the output the sa account has a password set to