ef1500

NICONICO/ニコニコ Community OSINT

Author: EF1500

Introduction

Niconico is like Japanese BiliBili, it is a video hosting platform where users can host videos, create communities and other various activities. Depending on the age of the profile/community, you can discover various information that is crucial to any investigation. However, it may be difficult to pick out information if you are new to OSINT or do not speak the language. This writeup aims to make it easier to find information about Niconico communities/users.

Information you can uncover from Niconico may include:

• Email Addresses
• Skype Usernames
• Friend Usernames/Communities

ef1500

Twitter API Keys

Twitter for iPhone

Consumer key: IQKbtAYlXLripLGPWd0HUA
Consumer secret: GgDYlkSvaPxGxC4X8liwpUoqKwwr3lCADbz8A7ADU

Twitter for Android

Consumer key: 3nVuSoBZnx6U4vzUxf5w
Consumer secret: Bcs59EFbbsdF6Sl9Ng71smgStWEGwXXKSjYvPVt7qys

Twitter for Google TV

Consumer key: iAtYJ4HpUVfIUoNnif1DA

ef1500

# zipinfo.py -c US -z 58906
import requests
import argparse

BASE_URL = "https://zip-api.eu/api/v1/info/"

class ZipInfo:
    
    def __init__(self, zipcode, country_code):
        self.zipcode = zipcode

ef1500

Common Image/Video Naming Conventions
How to use this: On services like Discord, uploading files from your device is a commonly used feautre.
This list can be used to determine what device a video was taken with, what application it was saved from, and/or other various information.

image0.*/video0.* - Iphone
uuid (dbb0b5d7-3a34-4aac-be88-1aee7be9a202).* - iPhone
trim.<UUID>.mov - Iphone
IMG_<4 Digits>.* - iPhone
FB_IMG_<integer string>.* Facebook
<8 Digits>_<15 Digits>_<19 Digits>_n.* - Instagram/Facebook (Just remember _n) Note: _o is also common as well.

ef1500

gmail.com
yahoo.com
hotmail.com
aol.com
hotmail.co.uk
hotmail.fr
msn.com
yahoo.fr
wanadoo.fr
orange.fr