These are not theoretical risks – individuals have faced criminal prosecution, significant fines, and even imprisonment for unauthorised password testing.
For example, to download a specific wordlist from Probable-Wordlists: password wordlist txt download github work