NoMethodError undefined method `get_cookies' for nil:NilClass

[LauanGuermandi]

Steps to reproduce

How'd you do it?

NoMethodError undefined method `get_cookies' for nil:NilClass

msf5 exploit(multi/http/moodle_cmd_exec) > 
msf5 exploit(multi/http/moodle_cmd_exec) > exploit

[*] Started reverse TCP double handler on 192.168.13.15:8000 
[-] Exploit failed: NoMethodError undefined method `get_cookies' for nil:NilClass
[*] Exploit completed, but no session was created.
msf5 exploit(multi/http/moodle_cmd_exec) > Interrupt: use the 'exit' command to quit
msf5 exploit(multi/http/moodle_cmd_exec) > Interrupt: use the 'exit' command to quit
msf5 exploit(multi/http/moodle_cmd_exec) > version
Framework: 5.0.21-dev-
Console  : 5.0.21-dev-
msf5 exploit(multi/http/moodle_cmd_exec) > Interrupt: use the 'exit' command to quit
msf5 exploit(multi/http/moodle_cmd_exec) > 

Metasploit version

Get this with the version command in msfconsole (or git log -1 --pretty=oneline for a source install).

I installed Metasploit with:

Framework: 5.0.21-dev-
Console : 5.0.21-dev-

Source install (please specify ruby version)

OS

Linux Mint 19.1

[h00die]

looks like the classic error: https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/moodle_cmd_exec.rb#L70 using a return from send_request_cgi w/o checking it isn't nil first.

@LauanGuermandi the module has a bug which will get fixed. However, if youre working on an exam and don't want to wait, the error is because it tries to do a GET to [URI if you set that]/index.php and failed. Double check the IP/port combo, as its most likely a typo.

[h00die]

I'm able to reproduce:

msf5 > use exploit/multi/http/moodle_cmd_exec 
msf5 exploit(multi/http/moodle_cmd_exec) > set rhost 192.168.0.199
rhost => 192.168.0.199
msf5 exploit(multi/http/moodle_cmd_exec) > run

[*] Started reverse TCP double handler on 192.168.1.5:4444 
[-] Exploit failed: NoMethodError undefined method `get_cookies' for nil:NilClass
[*] Exploit completed, but no session was created.

Notice I set an unavailable network from my own, hence the fail. Patch incoming shortly.

[LauanGuermandi]

thanks!!! :)