The Quest for the Shortest Domain
josephthacker.com | blog | #bug-bounty | #automation | #xss | #ssrf | #domain-names | #payload | #unicode
Summary
Joseph Thacker recounts spending six hours reversing registrar APIs to find short domains for XSS/SSRF payloads, comparing ASCII vs Unicode length and landing on finds like rad.pw and t4.rs.
- Published
- Collected
--- id: 1541 title: "The Quest for the Shortest Domain" source_domain: josephthacker.com source_url: "https://josephthacker.com/hacking/2025/08/19/quest-for-the-shortest-domain.html" published_at: "2025-08-19 00:00" tags: ["bug-bounty", "automation", "xss", "ssrf", "domain-names", "payload", "unicode"] phying_url: "https://phying.com/item/1541" lang: en --- # The Quest for the Shortest Domain ## Summary Joseph Thacker recounts spending six hours reversing registrar APIs to find short domains for XSS/SSRF payloads, comparing ASCII vs Unicode length and landing on finds like rad.pw and t4.rs. ## Intelligence Metadata - **Sources:** josephthacker.com - **Published:** 2025-08-19 00:00 - **Original:** https://josephthacker.com/hacking/2025/08/19/quest-for-the-shortest-domain.html - **Phying News:** https://phying.com/item/1541