SharpSQLTools and @RcoIl are small tools that can upload and download files, xp_cmdshell ...

Not-So-Blind RCE with SQL Injection With Example by Prashant Kumar Once ...