The following blog posts are a good introduction to password cracking.
Leaked passwords found online, e.g. at pastebin, torrents, etc.. The user names, email addresses, etc. have been removed. The passwords are ordered by number of appearances in the leak. If the number of appearances is the same for several passwords they're ordered alphabetically.
The files are formated the following way:
Ending with [wc].txt: #OfAppearances\t\tPassword\n Ending with [woc].txt: Password\n
I don't condone nor encourage to use any password list listed on this site to perform dictionary attack against user accounts without prior written and explicit permission from the respective owners.
| Name | Download [wc] (size uncompressed) | Download [woc] (size uncompressed) |
|---|---|---|
| mergedComplete | 188,4 MB (188.435.922 Bytes) | 143,9 MB (143.878.162 Bytes) |
| mergedTop10k | 132,0 kB (132.017 Bytes) | 80,5 kB (80.501 Bytes) |
| Date of leak | Name | Download [wc] (size uncompressed) | Download [woc] (size uncompressed) | Notes |
|---|---|---|---|---|
| 2006-10 | MySpace | 467,8 kB (467.825 Bytes) | 356,4 kB (356.351 Bytes) | Found on SkullSecurity. Slightly reformatted to fit the formatting of the rest of the files. “Captured via phishing” |
| 2009-01 | phpbb | 2,1 MB (2.128.933 Bytes) | 1,6 MB (1.574.394 Bytes) | Found on SkullSecurity. Slightly reformatted to fit the formatting of the rest of the files. “Ordered by commonness Cracked from md5 by Brandon Enright (97%+ coverage)” |
| 2009-03 | Faithwriters | 97,8 kB (97.751 Bytes) | 72,7 kB (72.694 Bytes) | Found on SkullSecurity. Slightly reformatted to fit the formatting of the rest of the files. “Religious passwords” |
| 2009-07 | Elitehacker | 9,2 kB (9.202 Bytes) | 6,5 kB (6.515 Bytes) | Found on SkullSecurity. Slightly reformatted to fit the formatting of the rest of the files. “Part of zf05.txt” |
| 2009-07 | Hak5 | 31,8 kB (31.773 Bytes) | 24,7 kB (24.713 Bytes) | Found on SkullSecurity. Slightly reformatted to fit the formatting of the rest of the files. “Part of zf05.txt” |
| 2009-12 | Rockyou | 183,2 MB (183.231.506 Bytes) | 139,9 MB (139.921.495 Bytes) | Found on SkullSecurity. Slightly reformatted to fit the formatting of the rest of the files. “Best list available; huge, stolen unencrypted” |
| 2010-03 | Älypää | 14,6 kB (14.598 Bytes) | 10,2 kB (10.249 Bytes) | Found on SkullSecurity. Slightly reformatted to fit the formatting of the rest of the files. “Finnish passwords” |
| 2010-04 | Facebook (Pastebay) | 664 Bytes | 499 Bytes | Found on SkullSecurity. Slightly reformatted to fit the formatting of the rest of the files. “Found on Pastebay; appear to be malware-stolen.” |
| 2010-05 | Carders.cc | 22,5 kB (22.506 Bytes) | 16,8 kB (16.759 Bytes) | Found on SkullSecurity. Slightly reformatted to fit the formatting of the rest of the files. |
| 2010-08 | Unknown porn site | 82,1 kB (82.117 Bytes) | 57,8 kB (57.834 Bytes) | Found on SkullSecurity. Slightly reformatted to fit the formatting of the rest of the files. “Found on angelfire.com. No clue where they originated, but clearly porn site.” |
| 2010-09 | Facebook Phished | 33,0 kB (33.012 Bytes) | 25,7 kB (25.686 Bytes) | Found on SkullSecurity. Slightly reformatted to fit the formatting of the rest of the files. “Thanks to Andrew Orr for reporting” |
| 2010-09 | Ultimate Strip Club List | 441,4 kB (441.361 Bytes) | 324,7 kB (324.742 Bytes) | Found on SkullSecurity. Slightly reformatted to fit the formatting of the rest of the files. “Thanks to Mark Baggett for finding!” |
| 2010-10 | Singles.org | 131,5 kB (131.451 Bytes) | 94,7 kB (94.691 Bytes) | Found on SkullSecurity. Slightly reformatted to fit the formatting of the rest of the files. |
| 2011-06 | Nato-bookshop.org | 123,5 kB (123.509 Bytes) | 92,3 kB (92.266 Bytes) | Leaked by LulzSec - 50 days of lulz |
| 2011-06 | sonybmg.be | 153 Bytes | 114 Bytes | Leaked by LulzSec - Sownage |
| 2011-06 | sonybmg.nl | 5,5 kB (5.532 Bytes) | 4,2 kB (4.195 Bytes) | Leaked by LulzSec - Sownage |
| 2011-06 | sonypictures.com | 355,8 kB (355.752 Bytes) | 264,9 kB (264.884 Bytes) | Leaked by LulzSec - Sownage |
| 2011-12 | Portalmercosur.com | 34,4 kB (34.362 Bytes) | 25,8 kB (25.816 Bytes) | |
| 2012-03 | gloriousindia.com | 20,6 kB (20.610 Bytes) | 15,7 kB (15.719 Bytes) | |
| 2012-07 | Yahoo! | 4,3 MB (4.282.278 Bytes) | 3,3 MB (3.252.908 Bytes) | Obtained by torrent. |
| 2012-11 | barca.am | 71,7 kB (71.704 Bytes) | 54,2 kB (54.249 Bytes) | Found on pastebin.com. Leaked by AsSerT && MetaiZM. |
| 2013-11 | terra.com.br | 42,4 kB (42.413 Bytes) | 30,5 kB (30.518 Bytes) | Found on pastebin.com. |
| unknown | Hotmail | 114,2 kB (114.175 Bytes) | 87,4 kB (87.381 Bytes) | Found on SkullSecurity. Slightly reformatted to fit the formatting of the rest of the files. “Isn't clearly understood how these were stolen” |