I want to design a scenario in which I have a web site which contains a link. If the user clicks on this link, it will save a file in a specific pat in his hard disk without his consent. Is this possible?
If you have plugins and can run Java Applets its possible. There should be warnings that pop up, but one could use social engineering to trick them into click this. You could probably just get them to download an executable and home their anti-malware settings don't block it.
Beyond that you would need to exploit a flaw in the browser's implementation of some spec or security design.
Some useful links: