Giddy

Where do I go from the obvious injection? xp_******* won’t work, how can I get the password hashes everyone is talking about? Tried xp_dir****e too.