We have a couple of files containing information about leaked real-world passwords that you can use in the exercises in this section:

• RockYou top 1000, MD5 hashes only
• haveibeenpwned top 1000, SHA1 hashes

Exercise: Pick a hash from near the top of the RockYou Top 1000 and see how easily you can crack it using your Python functions.

Exercise: Plot the frequencies of the Pwned Top 1000 and comment on the distribution.