Rockyou will suffice. I used that other word list because it doesn't error out in ZAP due to the length. The correct password is found in the first couple hundred passwords of Rockyou, and you could cat those out and use them in the same manner.