A short wordlist i use :)

Wordlist

actuator
actuator/heapdump
_admin
adminer.sql
admin/heapdump
admin.php
after.sh
aliases
api
api/batch
api-docs
api/payment?id=
api/proxy
api/proxy?url=  
api/v1/labels
api/v1/label/version/values
api/v1/swagger.json
api/v1/targets
app.json
application/configs/application.ini
application.wadl
app-stats
.appveyor.yml
.arcconfig
.arcrc
.store
.aws/credentials
.babelrc
backup
backup.sql
.bash_history
.bash_profile 	
.bashrc
.bashrc 	
beans
blog/_wpeprivate/config.json
.bower.json
bower.json
.bowerrc
build.xml
caches   
_cat/indices
cgi-bin
.circleci/config.yml
circle.yml
cloud/.credentials 	
cloud/heroku.json 	
cloud/.s3cfg 	
cloud/.tugboat 
codeception.yml
composer.json
composer.lock
.config
config 	
config/database.yml
config/deploy.yml
config.json
config.lua
config.php
config.php.txt
config.rb
config.ru
_config.yml
console
.credentials 	
CVS/Entries
CVS/Root
dasbhoard/
data
ui
data.txt
db/dbeaver-data-sources.xml 	
db/dump.sql 	
db/mongoid.yml 	
db/.pgpass 	
db/robomongo.json 	
debug
debug.log
demo
demo 
deployment-config.json 	
dev
django.log
.dockercfg
.dockercfg 	
docker-compose.yml
.docker/config.json 	
Dockerfile
.dockerignore
download
downloads/dom.php
.DS_Store
.editorconfig
Elmah.axd
env
.env
.env.sample
.eslintrc.json
.esmtprc 	
etc
etc/shadow 	
fetch
filezilla/filezilla.xml 	
filezilla/recentservers.xml 	
.ftpconfig 	
Gemfile
Gemfile.lock
.git
.gitattributes
.git/config
.git-credentials 	
.git/HEAD
.gitignore
.gitmodules
graph
graphql
graphql/console
graphql-explorer
gruntfile.coffee
Gruntfile.coffee
gruntfile.js
Gruntfile.js
Gulpfile
gulpfile.js
Gulpfile.js
heapdump
.hg
.hg/requires
high-entropy-misc.txt
Homestead.yaml
.htaccess
.htpasswd
hub 	
.idea
.idea/WebServers.xml 	
index.js
java/
Jenkinsfile
jenkins/script
.jestrc
karma.conf.js
key
keys
_legacy
license
LICENSE
license.md
LICENSE.md
license.txt
LICENSE.txt
.log
login/cpanel
logs.txt
log.txt
main.js
maintenance
Makefile
manage/heapdump
manifest.json
manifest.yml
metrics
misc-keys/cert-key.pem 	
misc-keys/putty-example.ppk 	
mkdocs.yml
.mozilla/firefox/logins.json 	
mw-config/
.mysql_history
.netrc 	
nginx_app.conf
nginx.conf
nginx_status
nomad
npm-debug.log
.npmignore
.npmrc 	
npm-shrinkwrap.json
old
out
package.json
status.php
status
phpinfo.php
php.php
phptest.php
phpunit.xml
pom.xml
pprof
Procfile
.profile
proftpdpasswd 	
proxy
Rakefile
rancher-compose.yml
readfile
read_file
readme
README
readme.html
README.html
readme.md
README.md
readme.mkd
README.mkd
readme.txt
README.txt
RELEASE_NOTES.txt
.remote-sync.json 	
Resources.zip.manifest
.rspec
ruby/config/master.key 	
.s3cfg
Search-Replace-DB/
Search-Replace-DB-master/
secure/attachmentzip/
secure/ConfigureReport.jspa
serverless.yml
server-status
service?Wsdl
sessions
sftp-config.json 	
sftp.json
solr
sqlnet.log
.ssh/authorized_keys
.ssh/config
.ssh/id_rsa
.ssh/id_rsa.pub
.ssh/known_hosts
status2
storage/logs/laravel.log
.subversion/config
.svn
.svn/entries
swagger/index.html
swagger-resources
swagger-ui 
swagger-ui.html
swagger/v1/swagger.json/
.swp
system/console
tags
temp
test
test/apacheasp/test.asp
test/cgi/test.html
test/fcgi/fcgi.py
test/fcgi/test.fcgi
testing
test.php
test/php/test.php
test/python/test.py
test/ssi/test.shtml
Thumbs.db
token
tokens
Trace.axd
.travis.yml
tsconfig.json
.tugboat 
ui/#/app
upload
v2/_catalog
Vagrantfile
vendor/autoload.php
ventrilo_srv.ini 	
version
VERSION
.vimrc
.vscode/sftp.json 	
web.config
web.config.old
web/django/settings.py 	
WEB-INF/web.xml
web/js/salesforce.js 	
webpack.config.js
web/ruby/secrets.yml 	
WebServers.xml
web/var/www/.env 	
web/var/www/public_html/config.php 
web/var/www/public_html/.htpasswd 	
web/var/www/public_html/wp-config.php 	
wp-config.php
.wp-config.php.swp
wp-content/themes/.git/config
_wpeprivate/config.json
yarn-debug.log
yarn-error.loga
yarn.lock
.yarnrc