I still think wordlists are the easiest generic way of brute forcing passwords en-masse since most people still don't use password generators or aren't as uniuque as they think they are.

Sorting wordlists by some kind of metric should improve performance.