I made some small changes to the kerberos-get-realm script and have uploaded a version 0.2 of it. It’s available from the nmap-scripts page.
The new release adds support for a target file containing a list of IP’s to scan. This may be useful for enumerating instance names from a number of known SQL Server addresses. Get the new version here.
I have released a new version of my MSSQLScan tool. It contains fixes for running out of sockets when scanning large networks with low timeouts and re-scheduling of unsuccesful probes.
Let me know how/if it works and please send me bug reports.