3

Let's say I visit a website that could potentially infect my computer by just from visiting it. If I disable JavaScript, is it still possible to infect my computer?

I have already searched the site for this question, but I only find questions like this that don't mention disabling JavaScript

1
  • 1
    Don't forget about Web Assembly: github.com/stevespringett/disable-webassembly Neither Javascript or Web Assembly will install malware if the browser "sandbox" holds up, but they could perform other attacks that would steal credentials and or trick you into giving credentials. Browser extensions/plugins/addons are much more dangerous than client-side scripting/assembly. Commented Apr 8, 2021 at 22:55

3 Answers 3

4

Yes, it is possible.

Javascript is widely used for malware infection, and it's by far the most used way, but it's not the only vector for infection. If you run any vulnerable extension, or the browser uses any outdated library, then a specially crafted element can lead to code execution even without Javascript.

3

Disabling JavaScript can be helpful, but it is not sufficient, here is some additional information from MalwareByte: How do I get malware?

Malware can penetrate your computer when (deep breath now) you surf through hacked websites, view a legitimate site serving malicious ads, download infected files, install programs or apps from unfamiliar provide, open a malicious email attachment (malspam), or pretty much everything else you download from the web on to a device that lacks a quality anti-malware security application.

2

Of course! There are several vectors of attack available. For example, think about browser exploits where an adversary could obtain code execution taking advantage of a browser's vulnerability. Another really cool example would be the extensions that browsers allow you to install to extend functionalities.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .