hashpwn wordlist

[cyclone]

Title: hashpwn 2025 wordlist
Author: hashpwn, see credits below
hashpwn: Download URL
GitHub: https://github.com/hashpwn/wordlist
Description: This builds upon and supersedes the previous hashpwn* and cyclone_* wordlists and includes collections of both public and private wordlists.

now includes all founds submitted to forum.hashpwn.net
all invalid UTF8 char, control char and binary strings have been cleaned
all valid, non-printable UTF8 char have been converted to $HEX
wordlist sorted by frequency

release: 2025-12-12
lines: 1,267,416,276
bytes: 14,348,746,490

sha256:
a36a135092aa11719aeac351e12bb1d9e53b5220fcba3aa03dcecf3e3723ae93  hashpwn-2025-12-12.7z
74333ac917ba75202f61a7d809d46b85e962d13d2bec6e1df1ffde2592219f69  hashpwn.txt

head -n 20 hashpwn.txt 

123456
unknown
password
12345678
Aa123456.
1234567890
1234567
111111
dubsmash
hotmail123
123123
abc123
iloveyou
11111
000000
qwertyuiop
00000
family
55555

credits:

• cyclone - https://github.com/cyclone-github
• hashpwn - https://forum.hashpwn.net
• hashmob - https://hashmob.net
• hashkiller - https://hashkiller.io
• hashes . org (offline)
• crackstation - https://crackstation.net (600mb human passwords)
• various other sources

[justpretending]

This wordlist is full of (seemingly) truncated passwords like "FridayFun" and "FridayFunda" and "Freundlichkei" which aren't in Hashmob Combined Full. I'm curious what the source of these is. CrackStation?

[cyclone]

@justpretending The hashpwn wordlist was created from several dozen wordlists. As stated in the description above and on GitHub, the sources are:

• cyclone - https://github.com/cyclone-github
• hashpwn - https://forum.hashpwn.net
• hashmob - https://hashmob.net
• hashkiller - https://hashkiller.io
• hashes . org (offline)
• crackstation - https://crackstation.net (600mb human passwords)
• various other sources

[justpretending]

I'm aware of this. I was looking for the specific source of these truncated passwords.

My guess is that CrackStation's "human passwords" weren't totally human and also included password prefixes.

[A Former User]

@cyclone, the gofile link is dead. The torrent does not seem to be downloading either.

[cyclone]

@Aroun URL updated.

[RockMe]

Global download limit reached. Please try again later.

[cyclone]

@RockMe The download link is currently being spammed, so is being rate limited. I'll reset it.

Try again.

[RockMe]

@cyclone Thanks!

[cyclone]

hashpwn-2025-12-12 is available for download and includes all founds submitted to forum.hashpwn.net from Oct 2024 - Dec 2025.

Originally announced here: https://forum.hashpwn.net/post/4844