So, just monitoring twitter for Defcon tweets and came across this one: Matthewneely status update 878833018
Screencap:
Link to video: HERE
So what is cool about this tool? It generates an SQL injection that skirts the 64k size limit using MS Debugger on the victim end.
And of course the DEFCON 16 via Wired Mag (Artcile)