There's a decent write-up of how to do this here: https://www.spinellis.gr/blog/20090805/

As you said, it largely relies on reverse engineering and bruteforcing Twitter's ID generation.