Vulnerabilities in social networking sites

In this paper, we show that social networking web sites are vulnerable to be used as a bot. This transforms a social network into an antisocial network which can be used for network attacks. Remote code execution, manipulating victim´s browsers through legitimate web control functionality such as image-loading HTML tags, JavaScript instructions, and Java applets are few examples of how an adversary can hack into another user´s session. Apart from controlling social network users and driving them to launch attacks against third parties, an adversary can also harm the users themselves. In this report we explore these properties, develop real exploits, and analyze their impact. We will explore other possible misuses of online Social Network web sites.