I want to design a scenario in which I have a web site which contains a link. If the user clicks on this link, it will save a file in a specific pat in his hard disk without his consent. Is this possible?

  • 7
    No, unless you have a 0-day exploit. – HamZa Apr 25 '14 at 21:10

The browser is typically sandboxed from this type of system interaction just using JavaScript, localstore, etc.

If you have plugins and can run Java Applets its possible. There should be warnings that pop up, but one could use social engineering to trick them into click this. You could probably just get them to download an executable and home their anti-malware settings don't block it.

Beyond that you would need to exploit a flaw in the browser's implementation of some spec or security design.

Some useful links:

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.