SQLPing2

SQLPing2 is the updated GUI version of SQLPing which also includes the ability to scan an IP range and perform brute forcing password cracking using a user defined dictionary against numerous user supplied account names..

SQLPing2 is available from here.

As you can see from the above I have scanned a single IP address with a supplied user and password list.  This reports that the sa account has a password set to "password".

Note:- If you are targeting SQL7 you have to specify that SQLPing2 forces a check of port 1433 via the settings option at the top of the tool.