Home Help Me Help You Want your own scylla?
Follow @_hyp3ri0n

0-day Hunting

Though this project is personally mine (_hyp3ri0n) I have a super exciting project I wanted to point people to from my company Hyperion Gray. Please note it is non-free (not trying to bait and switch you). If you use this project you're likely interested in this :). Information can be found here

Want to help?

Hey folks! Thanks for using scylla.sh and welcome! This is and always will be free. Direct donations to scylla.sh are on hold, If you want to help me out personally because you use or like this project, my father has a side project for an app-based automated drip irrigation system for growing plants in your house (hint: it works well for weeds of a certain nature in legal states). Instead of support to scylla check out and donate to his Kickstarter if it looks interesting to you. Every tiny bit helps! Thanks everyone!

Why Scylla?

scylla.sh has two major goals. One is to have a community-oriented database leak community and make a useful tool for security researchers

The other major goal is to undercut those people that are selling databases. If we can provide a free product here, we are eating into the bottom-line of those people selling leaked dbs for thousands of dollars. This de-incentivises buying of those DBs and therefore posting them in the first place. Even places that are supposedly "ethical" (looking at you HIBP) still have no problem selling your data. scylla.sh is and *will always* be free with an open API.

*Search is in beta, please report bugs to the scylla github repo

ipuserpasshashnamedomainemailpassword
82.123.126.4nullnullScalp000webhost.comantony.milanesi@gmail.comlealea33
nullnullnullnulllinkedin.com87974280xxx
nullnullnullnullCollectionspooman46@yahoo.iedodge123
nullern_svs@hotmail.coma45f389c0d8e6dd5dfa0930a28ed2e23nullbadoo.comnullnull
nullnullefdb3af2bc0172928a23b077ccab8762b0c43ff5nulllinkedin.com86754419null
nullnullnullnullCollectionsMRanft@web.deopa8r4agua
nullnullnullnulllinkedin.com2765540xxx
nullnull8cb4795df2161f881c7e8c46bde912e5ccd3324bnulllinkedin.compsdscs@yahoo.comnull
nullnullnullnulllinkedin.com90816591xxx
nullnullnullnullCollectionsangelaw5603@gmail.comlmao
nullnullnullnullCollectionselutel@hotmail.comemeraldz4
nullnullnullnullCollectionsminekfkwk@gmail.compoloi
nullnull321f14ff1800e0162c190d5d673264873ad25e4cnulllinkedin.com67499185null
nullnullnullnull7k7k.coma4505232552586467
nullnullnullnulllinkedin.com81322812xxx
nullnullfa544cbcbbe0f1cdf4d33c997fe65f26c569bcb6nulllinkedin.com78877786null
nullnullnullnulllinkedin.com41818310xxx
nullnullnullnullCollectionshrslvrgr102@verizon.netmissy68
nullnullnullnullCollectionsmarcoito@gmail.comlibertad
nullnullffc4c5a63b1d4c5f7ddcb80c3880480ed14d1b56nulllinkedin.com125281323null
nullnull689a050a61241b95504799d978eaa457eb873aabnulldropbox.comnadjacanty@yahoo.comnull
nullnullee9e151e381ad94f3740eb14651e3a175d68aacenulllinkedin.comhenrik.bredo@danbolig.dknull
nullnatalia_peve@hotmail.com4e5f2de78dded27513264818ff98a4a5nullbadoo.comnullnull
nullnullnullnull7k7k.comuser@hainan.net619997
188.190.124.59nullnullNigel000webhost.comeltiacibir19749@mail.ruHksscWMqUo7
nulljokkel5@web.de80df8f0abb1e687fd3820720ce94f86dnullbadoo.comnullnull
nullmn_chouchoukhaled@hotmail.fr512bffb47b4412c3b7e5086c478c63fdnullbadoo.comnullnull
nullnull0d0cbfd38dc3ab9329b90f8042330544da6c22danulllinkedin.comirishmom30@rushmore.comnull
nullsiralexander5@hotmail.it2ee394dcc6120ace6118c2e8f7e5a86cnullbadoo.comnullnull
nullfreedomsrl2010@libero.ite093a4f1c3cdd55b9f78f38905f6d75anullbadoo.comnullnull
nullacaba74@virgilio.it0710b284f28e334b508e135b4bf2875cnullbadoo.comnullnull
nullnulldb11e975e06d6de263438a0c3c7464bf4fedf639nulllinkedin.com108081338null
nullnullnullnullCollectionskkosevich@bk.ru1029387465
nullnull415e2e993ac6df750082916a982adeab3e0e168fnulllinkedin.com45865516null
nullnull$2a$08$Z5g2PCDUjrjpUUjhGvvAxur.FegKLG/.C5RUcSNv4g1Co5rUGQFLCnulldropbox.comjohanna.hope@realise.comnull
nullnullnullnullCollectionsdidyouthinkieven@gmail.comspeedboat
nullnandor.kantor@gmail.com2bf311ac2afcde5cb49edffc423a1267nullbadoo.comnullnull
nullnull7ca39af4f530111148accfd46b6e7abc5c37b14fnulllinkedin.com149880068null
nullnullnullnull7k7k.com原型734992
nullnullnullnullCollectionstomdavid134@hotmail.comchillis
nullnullnullnull7k7k.comwinnie0426@hotmail.com7012049499
nullnullnullnulllinkedin.com84237322xxx
nullnullecaf2ebee8a3e5b509da2821948ba285c15a8037nulllinkedin.com108655706null
nullnullnullnullCollectionsmissveronica.1a@gmail.comverojl
nullnullnullnulllinkedin.com10516250xxx
nullnullc465bf59cf1f848de096c2cf0aa8b3f4aa5dbaaenulllinkedin.comlambcurls@msn.comnull
nullnull826884754068cdcda81e3edb7ab2ed3700880e06nulllinkedin.com106173497null
nullnullnullnullCollectionss.i.riches@talk21.comwetone1
nullnullnullnullCollectionsmirenmendoza@hotmail.comnasobave
nullnullnullnullCollectionsx-totti-x@hotmail.frtotti
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99



Queries

Queries use Lucene query syntax. Please note that queries have changed, you no longer need to capitalize the first letter of each field, scylla will rectify automatially if you do use the capital letter. You will get a 500 error if your query is incorrect. Use the fields listed above to guide you. Full query syntax (including wildcards) are supported

Example search for passwords that start with ff
    
      password:ff*
    
  
This would match any passwords with a d in them and the username dave, dale, dane, etc.
    
      name:da?e password:*d*
    
  

API

The search API can be accessed by sending a GET request to this page with the Accept header set to Accept: application/json

GET https://scylla.sh/search?q=your_query&num=100&from=200

The above GET request grabs 1000 results of your_query starting at the 200th record. Pagination can be done using the "from" parameter. Queries return the first 10,000 hits.

Data is returned in JSON format like the following:

[
   {
      "_id":"hKW8WWsBBGJneKoTbFS-",
      "_index":"pw_data",
      "_score":19.8656,
      "_source":{
         "Domain":"exploit.in",
         "Email":"marin.vardic@zzf.hr",
         "Password":"freeshit"
      },
      "_type":"_doc"
   },
   {
      "_id":"_3PgVGsBBGJneKoTof0e",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"linkedin.com",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "PassHash":"a3f5b3b7c790e397b2d77eca31cd96bcd57c8700"
      },
      "_type":"_doc"
   },
   {
      "_id":"dBmbWmsBBGJneKoTZ5Wk",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"exploit.in",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "Password":"vili2005"
      },
      "_type":"_doc"
   }
]



Note you may use the fields below to guide you, but not all fields are returned with each query, only available fields. If fields are added, they will be appended to the list of available fields for query.

ToS

The information on this website is intended only for research purposes. Access has been given to security or other researchers for the purposes of research ONLY. Other than that I sincerely hope this data helps you with your projects and aids in your understanding of your or your organization's security posture. Much love.

- _hyp3ri0n

ToS Enforcement

The information on this website is intended only for research purposes. We search common database leak sites to ensure this is not being circulated for malicious use. We do have default logging turned on for this website which likely includes IP addresses and other identifiers. Please don't misuse this information as we will cooperate with law enforcement if it is.

By the way, for old users, by popular request there is no longer a cryptominer on this website.

- _hyp3ri0n

Donations

Donations for scylla.sh are currently on hold! If you want to help please donate to my father's kickstarter project as described above.

Issues and Bugs

Scylla is currently in beta-v0.1. There will be bugs, Please report bugs to the scylla open github repo. Here you will also find the scylla code, please feel free to open feature requests here as well. These let me know what the community wants out of this site and is supremely useful to me.