---
title: "Discussion on \"DOOM — Chaining CSPT, Open Redirect, and XSS\" | Hashnode"
description: "Discussion on \"DOOM — Chaining CSPT, Open Redirect, and XSS\". How a Client-Side Path Traversal, an Open Redirect, and an innerHTML sink chain into one-click XSS and account takeover on the DOOM box."
url: "https://hashnode.com/posts/doom-chaining-cspt-open-redirect-and-xss/6a107cad1f237623ea0ce303"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [DOOM — Chaining CSPT, Open Redirect, and XSS](https://blog.iliyadindar.site/doom-chaining-cspt-open-redirect-and-xss?utm_source=hashnode&utm_medium=feed)

How a Client-Side Path Traversal, an Open Redirect, and an innerHTML sink chain into one-click XSS and account takeover on the DOOM box.

May 22 · 7 min read · blog.iliyadindar.site  
Updated Sep 22  
Read the article

-   [#xss](https://hashnode.com/tag/xss)
-   [#web-security](https://hashnode.com/tag/web-security)
-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#bug-bounty](https://hashnode.com/tag/bug-bounty)
-   [#ethical-hacking](https://hashnode.com/tag/ethical-hacking)

## Written by

[Iliya](https://hashnode.com/@callmeiliya)

@callmeiliya

  
[View profile](https://hashnode.com/@callmeiliya)

## Responses

Markdown supported · ⌘↵ to post

No responses yet.