Password list

[logistix111]

7 years ago, rockyou.txt with some masking was considered good enough.  Not so much anymore.  I used to have quite a few good word lists compiled, sorted, awk'd, cewl'd, crunch'd, etc. but lost that data unfortunately.

Does anyone know of any GOOD sights now where we can get the latest leaked lists? (any lists with unsalted MD5 is OK, I don't mind spending a few minutes cracking them)

Good 'ole Brian says LeakedBase is down now

https://krebsonsecurity.com/2017/12/hack...more-41756

[Flomac]

For starters:
https://hashes.org/leaks.php

[Flomac]

Another one:
http://www.adeptus-mechanicus.com/codex/...shpass.php

[slyexe]

weakpass has a bunch of available wordlist as well.

[logistix111]

weakpass has a bunch of available wordlist as well.

Thanks! One of the things I didn't like about other lists is they contained the hash too which is a PITA to remove and clean up.

[royce]

Thanks! One of the things I didn't like about other lists is they contained the hash too which is a PITA to remove and clean up.

Find a way to do this - separating fields based on a delimiter - quickly and easily. It will serve you well in this context.

[xkcd3301]

You can also check here:
https://github.com/danielmiessler/SecLis.../Passwords

hashes.org was also mentioned before, from those, I would recommend the LinkedIn one, it is one of the biggest lists with 60+ million unique passwords!