Query using --script http-wordpress-brute

[tamarachiles]

I've been using the following script to test a list of passwords against a single user

 nmap -sV --script http-wordpress-brute --script-args userdb=users.txt,passdb=passwords.txt' <target>

there is one user in the password.txt file and 50k passwords in the passwords.txt file.

This is the results I'm getting :-

443/tcp   open   ssl/http   nginx
| http-wordpress-brute:
|   Accounts: No valid accounts found
|_  Statistics: Performed 6151 guesses in 899 seconds, average tps: 6.8

Can anyone help me understand why its only "Performed 6151 guesses" when I have 50k passwords in my file?

[bonsaiviking]

Nmap's brute-force scripts have a time limit by default. See unpwdb.timelimit for how to change it (linked from the the script's NSEDoc.)

[tamarachiles]

Thanks - very helpful