A couple of URL shortening services like Google and TinyURL are available over the Internet, and I’m a big fan as Short or Tiny URLs as they are very useful to share contents on social media (Eg. Twitter with 140 Char limit), especially for bloggers, but they can be used for malicious purposes by spammers and hackers because they guarantee a virtual anonymity to their user and the domain.
Don’t believe me? Please wear your headphone and try the Powershell command below with a Short URL. It’s FUN 🙂 but it could have been worst, may be a malicious file would have been downloaded on your computer.
Recently, I shared some Powershell code /r/PowerShell/ which had a link which was downloading a CSV file using a Short URL from IEEE.org website which was legit, but some people were bit skeptical to run the code. Can’t blame them.
The Idea and the Powershell Function:
So, I was thinking there are short URLs services then the opposite must also exist.
A simple google search resulted in lots of Short URL expander web services and APIs, and I wrapped one of them which does not require a subscription key in a quick Powershell function, to make it work.
Using this function I can also, scan for Downloaded scripts and Documents with Powershell and check if any Short URL is directing to some bad script, domain or malicious content.
Running the Function:
You can run the function like in the below animation.
Hope you’ll find the script useful and Thanks for reading, Cheers! 🙂