Home Help Me Help You Want your own scylla?
Follow @_hyp3ri0n

0-day Hunting

Though this project is personally mine (_hyp3ri0n) I have a super exciting project I wanted to point people to from my company Hyperion Gray. Please note it is non-free (not trying to bait and switch you). If you use this project you're likely interested in this :). Information can be found here

Want to help?

Hey folks! Thanks for using scylla.sh and welcome! This is and always will be free. Direct donations to scylla.sh are on hold, If you want to help me out personally because you use or like this project, my father has a side project for an app-based automated drip irrigation system for growing plants in your house (hint: it works well for weeds of a certain nature in legal states). Instead of support to scylla check out and donate to his Kickstarter if it looks interesting to you. Every tiny bit helps! Thanks everyone!

Why Scylla?

scylla.sh has two major goals. One is to have a community-oriented database leak community and make a useful tool for security researchers

The other major goal is to undercut those people that are selling databases. If we can provide a free product here, we are eating into the bottom-line of those people selling leaked dbs for thousands of dollars. This de-incentivises buying of those DBs and therefore posting them in the first place. Even places that are supposedly "ethical" (looking at you HIBP) still have no problem selling your data. scylla.sh is and *will always* be free with an open API.

*Search is in beta, please report bugs to the scylla github repo

ipusernameuserpasssaltpasshashdomainnameemailpassword
nullnullnullnullnulllinkedin.comnull56255250xxx
nullnullnullnullnull7k7k.comnull271170805198658cx
nullnullnullnullnullCollectionsnullthekevin412@gmail.comkitchi
nullnullnullnull4310e80d522c100411ec47c57c692719fe5e91c1dropbox.comnullgvg@noos.frnull
nullnullchicasparafollar@yahoo.esnull0d70b7e61ca44184288a884c4969be59badoo.comnullnullnull
nullnullpacocas@live.com.ptnullefe1836074afbc3aa5e1736f6ca88bf7badoo.comnullnullnull
nullnullnullnull5f38b4f79c3cd43edef7d674200fe230f7cc70e8linkedin.comnull101626655null
nullnullnullnullnullCollectionsnull57233855@qq.companwenzhi1
nullnulldsa33s2a@guglemail.co.ccnull63f611aab458d889d424ef64f042b4d0badoo.comnullnullnull
nullnull100001403674658@facebook.comnull9781c4040060a372a54a178854801288badoo.comnullnullnull
nullnullnullnull$2a$08$GMyjrk4OyBcuRd3FjVERP.XRTBKdlDtMS8lY4pGpj5DVtLXo0/sM2dropbox.comnullsathishdiscover@yahoo.comnull
nullnullnullnullnullCollectionsnullgusano518_@hotmail.combolivar012
nullnullnullnullnull7k7k.comnullwudeshizhe@163.com77673043
nullnullnullnullnullCollectionsnullmrsteve312@mail.ruqazwsxedcrfvtgb
nullnullmelinica@gmail.comnull6dade4d44a0144bc91e8f3fb45855279badoo.comnullnullnull
nullnullshila-86@hotmail.denull58d86572982608d9e0216e09eee45b02badoo.comnullnullnull
nullnullnullnullnulllinkedin.comnull54610731xxx
nullnullnullnull1887517f51d81c105df62fcdf2f8af07ddba3643linkedin.comnullmcverweij@planet.nlnull
nullnullnullnullnulllinkedin.comnull131177950xxx
nullnullnullnull3f514f0575026d5962e1773d7a51950d4684650dlinkedin.comnullsalima.smile@hotmail.comnull
nullnullnullnull9fa020909abb9391546b338d34bd7f78969930a1linkedin.comnullh.stroeher@googlemail.comnull
nullnullnullnullcad159d5a599f26e83134ccf934d205af70be14elinkedin.comnull80421944null
nullnullnullnull275269c49cbcef1005c4d6271c904d9d6d5a93eclinkedin.comnull65308234null
nullnullnullnullnullCollectionsnulltimeverwijn@gmx.desbgkln123
nullnullnullnull$2a$08$dlrxMOxRUzGpNW.Q.SSsa.aoUVZMy.7hhuZPsAHvY3PIzZL4gW7HKdropbox.comnullctorrent@gvseafreight.comnull
nullnullnullnullnulllinkedin.comnullmark.parmley@gmail.comxxx
nullnullnullnullnulllinkedin.comnulldby0425@bellsouth.netxxx
nullnullnullnullnullCollectionsnulldimas007@yaho.deVQsaBLPzLa
nullnullgerbenbos74@hotmail.comnull7ca799f380bdf779a8ada4934ca3c671badoo.comnullnullnull
nullnullnullnullnullCollectionsnullmarmott10@yahoo.co.ukbanemebe
nullnullnullnullnullCollectionsnullseker_olga@hotmail.comgalatasaray
nullnullnullnull$2a$08$ubp88vr7T.dA7oR0dsR2huCCjJW2.YzG5x5YPYsT8ewAX.JJCsvC2dropbox.comnullstevejones@dimickdevelopment.comnull
nullnullnullnull0014c71d7c3e6f94c4898c60ad4320a91ac770d7linkedin.comnullchicho_848@hotmail.comnull
nullnullnullnullb6d8a35db924504a081e98dd9832b3f4c8500578linkedin.comnull72971604null
nullnullnullnull97ca4e85f5487508bdda5665ee0f7e22ca5a6888linkedin.comnullfabianaduartedasilva@hotmail.comnull
124.169.14.115nullnullnullnull000webhost.comThomas Aldersontalderson26@gmail.comthomas666666
nullnullnullnull0ab898f164989107bbc5f71f3caa225d7557134elinkedin.comnull51233353null
nullnullnullnull9333dc4321deeed8faa99d915d826bed9c379f68dropbox.comnullinfo@andrewbain.orgnull
nullnullnullnull77895c1dfd9f81771a5fcce1c9593d266aa7a6c9linkedin.comnullschneidsps@aol.comnull
189.133.86.184k_777null[N_4[cRqEV!jb[8>-q2!tqb;y%B:PU44af0e9e6c2c7f2a63a6a7ea21ddaee0WiiUISO.comnullroykamikaze77@gmail.comnull
nullnullnullnullfbbfff5652b6490a40fdad2a8f9457c659f02638linkedin.comnullallessandra2009@live.comnull
nullnullgeoffreyw.ang4@gmail.comnull1ba2f5d3ec499c681aff01371c20a3a3badoo.comnullnullnull
nullnullmorettaa_@hotmail.itnullfc700021511fbf79ef5b8f7ff7ac6a51badoo.comnullnullnull
nullnullmajergoch2009@yahoo.comnull5456adbd5e7c724ce8a388db4df4f5fbbadoo.comnullnullnull
nullnullnullnull4ec8a40e98860d898d096877264e2f362709f4b7linkedin.comnull38332833null
nullnullnullnullnulllinkedin.comnull162526282xxx
nullnullnullnullnulllinkedin.comnullmelaniejamir@hotmail.comxxx
nullnullnullnullnullCollectionsnullmemo4585memo4585@hotmail.com123456789.
nullnullnullnulle745ee939605eec55ad66bb0f986fa65afc2d0c6linkedin.comnull77223444null
nullnullnullnullnulllinkedin.comnull162036240xxx
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99



Queries

Queries use Lucene query syntax. Please note that queries have changed, you no longer need to capitalize the first letter of each field, scylla will rectify automatially if you do use the capital letter. You will get a 500 error if your query is incorrect. Use the fields listed above to guide you. Full query syntax (including wildcards) are supported

Example search for passwords that start with ff
    
      password:ff*
    
  
This would match any passwords with a d in them and the username dave, dale, dane, etc.
    
      name:da?e password:*d*
    
  

API

The search API can be accessed by sending a GET request to this page with the Accept header set to Accept: application/json

GET https://scylla.sh/search?q=your_query&num=100&from=200

The above GET request grabs 1000 results of your_query starting at the 200th record. Pagination can be done using the "from" parameter. Queries return the first 10,000 hits.

Data is returned in JSON format like the following:

[
   {
      "_id":"hKW8WWsBBGJneKoTbFS-",
      "_index":"pw_data",
      "_score":19.8656,
      "_source":{
         "Domain":"exploit.in",
         "Email":"marin.vardic@zzf.hr",
         "Password":"freeshit"
      },
      "_type":"_doc"
   },
   {
      "_id":"_3PgVGsBBGJneKoTof0e",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"linkedin.com",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "PassHash":"a3f5b3b7c790e397b2d77eca31cd96bcd57c8700"
      },
      "_type":"_doc"
   },
   {
      "_id":"dBmbWmsBBGJneKoTZ5Wk",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"exploit.in",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "Password":"vili2005"
      },
      "_type":"_doc"
   }
]



Note you may use the fields below to guide you, but not all fields are returned with each query, only available fields. If fields are added, they will be appended to the list of available fields for query.

ToS

The information on this website is intended only for research purposes. Access has been given to security or other researchers for the purposes of research ONLY. Other than that I sincerely hope this data helps you with your projects and aids in your understanding of your or your organization's security posture. Much love.

- _hyp3ri0n

ToS Enforcement

The information on this website is intended only for research purposes. We search common database leak sites to ensure this is not being circulated for malicious use. We do have default logging turned on for this website which likely includes IP addresses and other identifiers. Please don't misuse this information as we will cooperate with law enforcement if it is.

By the way, for old users, by popular request there is no longer a cryptominer on this website.

- _hyp3ri0n

Donations

Donations for scylla.sh are currently on hold! If you want to help please donate to my father's kickstarter project as described above.

Issues and Bugs

Scylla is currently in beta-v0.1. There will be bugs, Please report bugs to the scylla open github repo. Here you will also find the scylla code, please feel free to open feature requests here as well. These let me know what the community wants out of this site and is supremely useful to me.