If you get a “line length exception” error in hashcat, it is often because the hash mode that you have requested does not match the hash. To verify, you can test your commands against example hashes.

Unless otherwise noted, the password for all example hashes is hashcat.

Note also that for many algorithms, when the raw hashes that are components of compound hashes such as sha1(sha1(pass)), the hash byte sequence being hashed is the 'hex' (ASCII) form of the hash. The exception is when the suffix _bin is present, which indicates that the raw/binary form of the inner hash is what is being hashed by the outer hash function.

^* In beta or not yet released
¹ Password: “hashcat!”
² rounds=[# of iterations] is optional here, after signature, e.g. $5$rounds=5000
³ Same format as in ² but the number of rounds must be specified
⁴ The hash used here is not the one sent via e.g. the web interface to LastPass servers (pbkdf2_sha256_hex (pbkdf2_sha256 ($pass, $email, $iterations), $pass, 1) but instead the one stored (by e.g. your browser or the pocket version) to disk. For instance, Opera and Chrome store the hash in local SQLite databases; Firefox uses files ending with “lpall.slps” - for Linux: 2nd line is interesting / base64 decode it; for Windows, see here - and_key.itr
⁵ You can consider the second part as a “salt”. If it is equal to 00000000, the CRC32 code will be considered as “not salted”
⁶ The raw sha256 output is used for base64() encoding (not the hexadecimal output)
⁷ The format is hash:salt:id
⁸ Password: “hashcat1”
⁹ Password: “hashcat1hashcat1hashcat1”
¹⁰ This file actually contains several examples of the different hash+cipher combinations. The password is stored in the pw file.
¹¹ You can use itunes_backup2hashcat to extract the hashes from the Manifest.plist file
¹² Password: “hashcat!!!”. Min/max password length is exactly 10 characters/bytes.
¹³ You can use AxSuite by Fist0urs to retrieve the hashes.
¹⁴ Password: a288fcf0caaacda9a9f58633ff35e8992a01d9c10ba5e02efdf8cb5d730ce7bc
¹⁵ Password: 5b13d4babb3714ccc62c9f71864bc984efd6a55f237c7a87fc2151e1ca658a9d
¹⁶ PIM: 500
¹⁷ full password in output is hashcat, but input provided must be without the first 6 bytes (therefore just: t)
¹⁸ 88f43854ae7b1624fc2ab7724859e795130f4843c7535729e819cf92f39535dc
¹⁹ use this SQL query to extract the hashes:

SELECT user, CONCAT('$mysql', SUBSTR(authentication_string,1,3), LPAD(CONV(SUBSTR(authentication_string,4,3),16,10),4,0),'*',INSERT(HEX(SUBSTR(authentication_string,8)),41,0,'*')) AS hash FROM user WHERE plugin = 'caching_sha2_password' AND authentication_string NOT LIKE '%INVALIDSALTANDPASSWORD%';

²⁰ Password: “hashcat_hashcat_hashcat_hashcat_”
²¹ you can extract the hashes with https://github.com/0x6470/bitwarden2hashcat
²² Password: b4b9b02e6f09a9bd760f388b67351e2b
²³ Password: $HEX[91b2e062b9]
²⁴ Password: $HEX[b8f63619ca]
²⁵ Password: $HEX[6a8aedccb7]
²⁶ Password: KxhashcatxhXkULNJYF8Fu46G28SJrC7x2qwFtRuf38kVjkWxHg3
²⁷ Password: 5KcL859EUnBDtVG76134U6DZWnVmpE996emJnWmTLRW2hashcat
²⁸ Password: KyhashcatpL2CQmMUDVMVuEXqdLSvfQ6TBjkUuyttSvBa7GMiuLi
²⁹ Password: 5HzV19ffW9QTnmZHbwETRpPHm1d4hAP8PG1etUb3T3jjhashcat
³⁰ Password: L4hashcat7q6HMnMFcukyvxxVJvpabXYjxXLey8846NtWUyX4YLi
³¹ Password: 5JjDR424kMePbt5Uxnm2t1NizhdiVPcf8gCj68PQpP2ihashcat
³² Password: 127e6fbfe24a750e72930c220a8e138275656b8e5d8f48a98c3c92df2caba935
³³ Password: 59887ec9920239bd45b6a9f82b7c4e024f80beaf887e5ee6aac5de0a899d3068
³⁴ Password: 2006a306cf8f61c18c4e78e5fc0f5a7aa473b5ffb41f34344a32f8e042786fa1
³⁵ Password: 4d1987d7a341d51557af59996845740135ab2506515426ada57cc8ec05adf794
³⁶ Password: 25c9f8f734d87aacd9308705ca50b9819a57425ffbfae41cef869b19764d72c2
³⁷ Password: 83b45ff8d85f37aafc05a8accd1f1cd5e50868b57e2ef0ef6f287bb4d8d17786
³⁸ Password: 4c969ccc86d9e1f557b4ff1f19badc9a99718dd2aec8fcf66460612e05f5f7dd

These hash types are usually only found on a specific platform.

These hash types are only supported in hashcat-legacy or oclHashcat.

¹ Supported in hashcat-legacy
² Supported in oclHashcat

These hash types used to be in some version of hashcat, but were removed or replaced.