Get the Whitepaper called Full MSSQL Injection PWNage.
You can download it from the following link: https://packetstormsecurity.com/files/download/74511/mssql-pwnage.txt
Source: https://packetstormsecurity.com/files/74511/Whitepaper-Full-MSSQL-Injection-PWNage.html