AWS - Route53 Enum

Reading time: 2 minutes

tip

Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

Check the subscription plans!
Join the 💬 Discord group or the telegram group or follow us on Twitter 🐦 @hacktricks_live.
Share hacking tricks by submitting PRs to the HackTricks and HackTricks Cloud github repos.

Route 53

Amazon Route 53 is a cloud Domain Name System (DNS) web service.
You can create https, http and tcp health checks for web pages via Route53.

This is useful to tune your DNS routing to make the best DNS routing decisions for your end users.
IP-based routing offers you the additional ability to optimize routing based on specific knowledge of your customer base.

Enumeration

bash

aws route53 list-hosted-zones # Get domains
aws route53 get-hosted-zone --id <hosted_zone_id>
aws route53 list-resource-record-sets --hosted-zone-id <hosted_zone_id> # Get all records
aws route53 list-health-checks
aws route53 list-traffic-policies

Privesc

AWS - Route53 Privesc

tip