Using password wordlists against systems you don’t own is illegal in most jurisdictions. This includes:
wget https://github.com/brannondorsey/naive-hashcat/releases/download/data/rockyou.tar.gz tar -xvzf rockyou.tar.gz
echo "wordlist_dir = /home/user/wordlists" >> ~/.hashcat/hashcat.conf