AWS - Route53 Enum

{% hint style="success" %} Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

Check the subscription plans!
Join the 💬 Discord group or the telegram group or follow us on Twitter 🐦 @hacktricks_live.
Share hacking tricks by submitting PRs to the HackTricks and HackTricks Cloud github repos.

{% endhint %}

Route 53

Amazon Route 53 is a cloud Domain Name System (DNS) web service.
You can create https, http and tcp health checks for web pages via Route53.

IP-based routing

This is useful to tune your DNS routing to make the best DNS routing decisions for your end users.
IP-based routing offers you the additional ability to optimize routing based on specific knowledge of your customer base.

Enumeration

aws route53 list-hosted-zones # Get domains
aws route53 get-hosted-zone --id <hosted_zone_id>
aws route53 list-resource-record-sets --hosted-zone-id <hosted_zone_id> # Get all records
aws route53 list-health-checks
aws route53 list-traffic-policies

Privesc

{% content-ref url="../aws-privilege-escalation/route53-createhostedzone-route53-changeresourcerecordsets-acm-pca-issuecertificate-acm-pca-getcer.md" %} route53-createhostedzone-route53-changeresourcerecordsets-acm-pca-issuecertificate-acm-pca-getcer.md {% endcontent-ref %}