duolingo-osint is a Python-based reconnaissance tool that allows you to retrieve detailed Duolingo profile information using an email address. Unlike other modules, it does not require any form of authentication or tokens, as it utilizes the public Duolingo API.
- Email Search: Identifies if an email is registered on the platform.
- Full Profile: Retrieves detailed data such as real name, username, bio, and location.
- Learning Statistics: Shows languages being learned, total XP, streaks (current and historical), and crowns.
- Account info: Creation date, email verification status, and whether the account has a Plus subscription or a linked phone number.
- Social Linkage: Indicates if the account is connected to Google or Facebook.
- Profile Picture: Provides a direct link to the high-resolution profile image.
- Python 3.x
requestslibrary
pip install requestsSimply run the script and select your preferred language:
python duolingo_osint.pyThen, enter the target's email address when prompted.
The tool performs two requests to the internal Duolingo API:
- Initial Search: Queries
https://www.duolingo.com/2017-06-30/users?email=...to obtain the user's unique ID. - Profile Extraction: Using the obtained ID, it queries
https://www.duolingo.com/2017-06-30/users/{userID}to download the full JSON with all profile metadata.
To avoid blocking (403 Forbidden), the script uses a complete set of headers to simulate a real web browser.
This tool is for educational and security research purposes only. Using this tool to enumerate unauthorized targets is prohibited. The author is not responsible for any misuse.
