The researchers reported the issue to the vendors they found vulnerable but also contributed their technique to SQLMap, an open-source penetration testing tool that automates SQL injection attacks.

Or I can put SQL Server on a VM and then write some process that will constantly write random bytes to a file, delete it, then write another to simulate disk contention (which should trigger some ...