Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What can happen if I visit known malicious site using Linux with javascript, java and flash disabled. Is there an attack vector that can take place regardless?

share|improve this question
If you really want to visit the site, you could use a virtual appliance. Basically use something like a livecd within Virtual Box or your favorite VM. – Zoredache Aug 30 '10 at 20:55
I'm aware of that, but virtual box freezes my machine for some reason... – blockhead Aug 31 '10 at 0:47

There still could be vulnerabilities in the browser code itself.

share|improve this answer

Well, let's look at the stack from a browser exploit level.

  • Page Download: When you download the page, it could trace your computer, your ISP, etc. and launch a DDoS or similar on it.

  • Page Render: The page, when rendered, can very easily be exploited with browser exploits using stuff like drive-by downloads, although most (95%) of that can be avoided by disabling Javascript. Javascript isn't the only problem though—check out this CSS hack.

  • User Interaction: Which is the hugest part. Browsers are pretty darn secure nowadays—you aren't. Just because you visit a site without any security issues in sight doesn't mean that you're out of the woods.

If you really need to visit this site, the best way is buy using Chromium in a VM.

share|improve this answer

Use Lynx instead? I don't see how anything malicious could get by it.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .