colabcat VS Probable-Wordlists

This is true for pretty much any site/account anywhere. The real issue is leaks/breaches, where the attacker has the data dump locally and can freely run hashcat/john as much as they want. Hell, they can even run hashcat in the cloud on google colab with extra gpu power completely free, no botnet needed. If they pay for colab pro they get even more gpus, memory, and (if they have pro+) background processing on google's servers while their browser is closed.

Free GPUs are quite a rarity, but you can try Google Colab + colabcat. Pros: free with cheap upgrade option. Cons: designed for short-term tasks like training small ML models, and not the fastest.

Alternatively, you can use ColabCat, which is Hashcat in Google Colab. TL:DR it's used for machine learning, data science, and light AI work, but you can request GPU optimized instances for free. https://github.com/someshkar/colabcat You'll get some pretty damn good results for what you'd like to do for not a lot of money. Save up until you've got about 3k and do a proper full build. The parts market is pretty garbage right now. It's 100% better to wait.

If you don't have hardware to crack hashes, check this out - https://github.com/someshkar/colabcat

Instead of using Crackstation as the source for passwords, I would recommend using the Probable Password Lists

A suggestion of a good wordlist (other than the infamous rockyou.txt) : https://github.com/berzerk0/Probable-Wordlists

Probable Wordlists

Probable V2 wordlist set https://github.com/berzerk0/Probable-Wordlists

Deauth, capture the handshake and crack with hashcat + https://github.com/berzerk0/Probable-Wordlists

CrackStation list is kinda outdated. Probable Wordlists by u/berzerk0 is a better collection for dict lists https://github.com/berzerk0/Probable-Wordlists