AWS Route 53

[ghost]

Service AWS Route 53

Status Not Vulnerable

Nameservers

ns-****.awsdns-**.org
ns-****.awsdns-**.co.uk
ns-***.awsdns-**.com
ns-***.awsdns-**.net

Explanation

AWS Route 53 is no longer vulnerable to DNS takeovers even when SERVFAIL errors are returned due to changes by the team that stops takeovers via newly created zones. This has been independently verified.

[0xpr4bin]

But can't we match the nameservers on hit and trial basis,deleting and creating zone until one of the ns matches

[indianajson]

@0xpr4bin This was patched for the most part where AWS won't serve the previously assigned NS pairs. It can happen in a very limited number of scenarios but as far as we are aware this is effectively patched.

[schniggie]

Have received a couple of successful NS takeovers over the last week. So I would recommend setting the label back to vulnerable.

[ertygiq]

@schniggie can you describe what steps you took?

[viszsec]

Have received a couple of successful NS takeovers over the last week. So I would recommend setting the label back to vulnerable.

Could you please show us proof of your claims? Stating baseless claims without facts or proof is merely a fallacy.