Home Help Me Help You Want your own scylla?
Follow @_hyp3ri0n

0-day Hunting

Though this project is personally mine (_hyp3ri0n) I have a super exciting project I wanted to point people to from my company Hyperion Gray. Please note it is non-free (not trying to bait and switch you). If you use this project you're likely interested in this :). Information can be found here

Want to help?

Hey folks! Thanks for using scylla.sh and welcome! This is and always will be free. Direct donations to scylla.sh are on hold, If you want to help me out personally because you use or like this project, my father has a side project for an app-based automated drip irrigation system for growing plants in your house (hint: it works well for weeds of a certain nature in legal states). Instead of support to scylla check out and donate to his Kickstarter if it looks interesting to you. Every tiny bit helps! Thanks everyone!

Why Scylla?

scylla.sh has two major goals. One is to have a community-oriented database leak community and make a useful tool for security researchers

The other major goal is to undercut those people that are selling databases. If we can provide a free product here, we are eating into the bottom-line of those people selling leaked dbs for thousands of dollars. This de-incentivises buying of those DBs and therefore posting them in the first place. Even places that are supposedly "ethical" (looking at you HIBP) still have no problem selling your data. scylla.sh is and *will always* be free with an open API.

*Search is in beta, please report bugs to the scylla github repo

ipuserpasshashdomainnameemailpassword
nullnullnullCollectionsnullrudy_83_@hotmail.frj3uj2ametu
nulllercheva66@freemail.huedbd187fcd5b065af8430c8beee7572dbadoo.comnullnullnull
nullnullfe728cf4e64ad6230db97bb8bdef7c4554ed65a4linkedin.comnullnullnull
nullnulle4cd8b03708584929f89e8a059d3ef6878b4bcafdropbox.comnullm-okabe@worldmate.or.jpnull
nullnull7711d7e3ce41e3fdd52ec678027bcd0cf0077d5alinkedin.comnullzq-1989@hotmail.comnull
nullnullnulllinkedin.comnull30704261xxx
nullademdemir_06@hotmail.comf6b091ec10b41dd9c5afade04b33ed32badoo.comnullnullnull
nullnullf96f7c72df6db1c41c0d6aa042facd2818bb664elinkedin.comnullkrusow@yahoo.com.brnull
nulllylybb@live.fr8ccaa3cb4f1e2b84e3efd0eaeb7ecd5ebadoo.comnullnullnull
nullspiderkalk@hotmail.com3024226bb329ba29fe5770284c5c3451badoo.comnullnullnull
nullnullee1e723029c1e0a3ba002782ce5797ab28904560linkedin.comnullmasood_work@yahoo.comnull
nullnull59971690305b317235247a7a93411a93303dcef6dropbox.comnullichen_k@yahoo.denull
nullnullf25f7d25af1d510ea826ca74b30626dce2fd40dalinkedin.comnull74128926null
nullnullf19b4a31e76099b849c1c87b812211c019085cbdlinkedin.comnull153519035null
nullarar65@hotmail.fr78e21ef81f405524a9ff57fc3e51b404badoo.comnullnullnull
nulljamy_ajax@hotmail.com0152bf65321b02a2e0e333934eaedb10badoo.comnullnullnull
nullnulld07dd4cda930f044197e4800b43d847e409527b2linkedin.comnull157983788null
nullyudhya@hotmail.com12ef4e5410f4aab206968c4e0829ec70badoo.comnullnullnull
nullnullnullCollectionsnullndsjsjxj@yahoo.comhoney123
nullnullnulllinkedin.comnull64469758 f9eb5dd9f6f1fbaea7443b061e00868db0b6dad8 -> philomena_clarke@yahoo.co.uk
nullnullnulllinkedin.comnull28597831xxx
nullmvilkec@gmail.com6c9bd13ed67ec7bf8346397375bfa8d3badoo.comnullnullnull
188.34.31.78nullnull000webhost.comhamedhamedkhalili87@gmail.cimdoktor008116
nullnull$2a$08$AEkAHM.ZjXG76ws3tNdtwOc3t5KUG6chX6g4Zo1WvfBxLUN1m7VMGdropbox.comnullmoog69@gmail.comnull
nullnullnullCollectionsnullcathy_palsgrove@yahoo.comjoanas
nulltugcekavuzlu@hotmail.comdedd5b6c171235c42036ef569eabaf92badoo.comnullnullnull
nullnullnullCollectionsnullaloneagle@sohu.comlb520xq
78.166.198.116nullnull000webhost.comalialipskn1905@windowslive.comalipiskin01
nullnullnullCollectionsnulldabo98@libero.itrplFRO263
nullnullfbfc02e517ed758a1696fbc8b8d1936e71125f2bdropbox.comnullprespect@gmail.comnull
null233045@blendr.badoo.comcffbbb24c7aa7c0b91014f55c7bd5bf7badoo.comnullnullnull
nullpango-rene@hotmail.it0b9c4d3bdd2ee1d5c153e3895eb4fcc1badoo.comnullnullnull
nullnullnullCollectionsnullwfy123cathy@sina.com13240476953
nulloda.sc_92@hotmail.com7550da1690f6a8138c8cc8ad12b8746dbadoo.comnullnullnull
nullsmithesty@velvet.hu48c474db3923f0b8d490870dfa69da24badoo.comnullnullnull
188.158.82.126nullnull000webhost.comarmineng.a.imani@gmail.comtoshiba2860
nullnullnullCollectionsnullvictor909hp@gmail.comsuperkilla
nullnull269ab8fe5a924273627cd24c20d4456c958408f0linkedin.comnull39569938null
nullnull570bcba439b14ed99a51a25c1f127654d576b76ddropbox.comnullsaxenshirah@webmail.co.zanull
nullnull9dbfa92894bb19526d97947de18b6f8ba55944e0dropbox.comnullva014@hotmail.comnull
nullnull4b1e1ab9780c260d2dcf1fd7b5f3cf301969688elinkedin.comnull163242104null
nullnullnulllinkedin.comnull159992221xxx
nullnullnull7k7k.comnull513130834@qq.com7913226
nullaniseta_08@hotmail.comb00c929130b022a0f997248ff607879ebadoo.comnullnullnull
nulljirove151@seznam.czd7ed9b60811e7888f99056a113151f70badoo.comnullnullnull
nullnull$2a$08$MtfGzDbtExAf5YyJkKrW7Oyh2qjVh2kuC72KwnEJps2sIt4nzF1IGdropbox.comnullcavalcante.phillipe@gmail.comnull
nullnull8174b89c2b20cacbcecf834146c4104a89f9fea9dropbox.comnulllion7979@gmail.comnull
nullnullnulllinkedin.comnull154616131xxx
nullnullnullCollectionsnullkj1030@earthlink.netvagina
nullnull$2a$08$R2gMLdqRxEQYjzM/5RYYqO73lz/uggM/Fwrug4Wl4JTVxuFhGt2Pudropbox.comnulldropbox.jack10@hotmail.comnull
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99



Queries

Queries use Lucene query syntax. Please note that queries have changed, you no longer need to capitalize the first letter of each field, scylla will rectify automatially if you do use the capital letter. You will get a 500 error if your query is incorrect. Use the fields listed above to guide you. Full query syntax (including wildcards) are supported

Example search for passwords that start with ff
    
      password:ff*
    
  
This would match any passwords with a d in them and the username dave, dale, dane, etc.
    
      name:da?e password:*d*
    
  

API

The search API can be accessed by sending a GET request to this page with the Accept header set to Accept: application/json

GET https://scylla.sh/search?q=your_query&num=100&from=200

The above GET request grabs 1000 results of your_query starting at the 200th record. Pagination can be done using the "from" parameter. Queries return the first 10,000 hits.

Data is returned in JSON format like the following:

[
   {
      "_id":"hKW8WWsBBGJneKoTbFS-",
      "_index":"pw_data",
      "_score":19.8656,
      "_source":{
         "Domain":"exploit.in",
         "Email":"marin.vardic@zzf.hr",
         "Password":"freeshit"
      },
      "_type":"_doc"
   },
   {
      "_id":"_3PgVGsBBGJneKoTof0e",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"linkedin.com",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "PassHash":"a3f5b3b7c790e397b2d77eca31cd96bcd57c8700"
      },
      "_type":"_doc"
   },
   {
      "_id":"dBmbWmsBBGJneKoTZ5Wk",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"exploit.in",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "Password":"vili2005"
      },
      "_type":"_doc"
   }
]



Note you may use the fields below to guide you, but not all fields are returned with each query, only available fields. If fields are added, they will be appended to the list of available fields for query.

ToS

The information on this website is intended only for research purposes. Access has been given to security or other researchers for the purposes of research ONLY. Other than that I sincerely hope this data helps you with your projects and aids in your understanding of your or your organization's security posture. Much love.

- _hyp3ri0n

ToS Enforcement

The information on this website is intended only for research purposes. We search common database leak sites to ensure this is not being circulated for malicious use. We do have default logging turned on for this website which likely includes IP addresses and other identifiers. Please don't misuse this information as we will cooperate with law enforcement if it is.

By the way, for old users, by popular request there is no longer a cryptominer on this website.

- _hyp3ri0n

Donations

Donations for scylla.sh are currently on hold! If you want to help please donate to my father's kickstarter project as described above.

Issues and Bugs

Scylla is currently in beta-v0.1. There will be bugs, Please report bugs to the scylla open github repo. Here you will also find the scylla code, please feel free to open feature requests here as well. These let me know what the community wants out of this site and is supremely useful to me.