Home Help Me Help You Want your own scylla?
Follow @_hyp3ri0n

0-day Hunting

Though this project is personally mine (_hyp3ri0n) I have a super exciting project I wanted to point people to from my company Hyperion Gray. Please note it is non-free (not trying to bait and switch you). If you use this project you're likely interested in this :). Information can be found here

Want to help?

Hey folks! Thanks for using scylla.sh and welcome! This is and always will be free. Direct donations to scylla.sh are on hold, If you want to help me out personally because you use or like this project, my father has a side project for an app-based automated drip irrigation system for growing plants in your house (hint: it works well for weeds of a certain nature in legal states). Instead of support to scylla check out and donate to his Kickstarter if it looks interesting to you. Every tiny bit helps! Thanks everyone!

Why Scylla?

scylla.sh has two major goals. One is to have a community-oriented database leak community and make a useful tool for security researchers

The other major goal is to undercut those people that are selling databases. If we can provide a free product here, we are eating into the bottom-line of those people selling leaked dbs for thousands of dollars. This de-incentivises buying of those DBs and therefore posting them in the first place. Even places that are supposedly "ethical" (looking at you HIBP) still have no problem selling your data. scylla.sh is and *will always* be free with an open API.

*Search is in beta, please report bugs to the scylla github repo

ipuserpasshashdomainnameemailpassword
nullnulla8a42690306898494d489a59b3369d653c226b97linkedin.comnulldpara@andersonstrudwick.comnull
nullnullnulllinkedin.comnullmagoluwaseun@ymail.comxxx
nullramanchauhan91@gmail.coma7f8a9e76909d9bedbcd329c6be9fd3dbadoo.comnullnullnull
nullnullnulllinkedin.comnullyanaboneva@abv.bgxxx
nullnicolucera@alice.it70c0ca201e51d86eebded8449fadd06cbadoo.comnullnullnull
nullnullnullCollectionsnullfifteenmay@sina.comgb3823760
nullnullnullCollectionsnullLaurenzbolongan@gmail.comokitseasy
nullnull7ebafbbc0bbd53ded4c87fd88cdecc38f663aee7linkedin.comnull170071953null
nullsajka17@o2.pl490ed9547fa91c93acaf9e753991bc2bbadoo.comnullnullnull
nullnullnullCollectionsnullmasterd12@freenet.depgkETL946
nullzed.b@seznam.cze6b3e4e1a45511eb83b4164f51296773badoo.comnullnullnull
nullnullnullCollectionsnulldev15@rambler.ruqse1234
190.188.50.176nullnull000webhost.comluis Felipechapare21@hotmail.commasrapido21
nullnull1b75c221cf78c28b961ab770f2e78ed4c946d05dlinkedin.comnull73900225null
nullnull1c6f64382dec10a35f44119440520b3deffa0299linkedin.comnullnishtha1993@gmail.comnull
nullnullnull7k7k.comnullzhlu_qd@yahoo.com.cn1119
nullnullc74805ab50d923bbadf6b98aacc49a6e9b16344alinkedin.comnull51337463null
nullmohamed-amine31@hotmail.com797caa5759906a81e4f1cd61813da599badoo.comnullnullnull
nullnull82e5de3edc4b4e59264c07ac2759c5fcc62ba5ealinkedin.comnull167720665null
nullsergiodobarganes@gmail.comaa74c46af26273da19c34c8fe476c5dabadoo.comnullnullnull
nullnulledb1cf2a3d42eecc6641aa55848838d7932416bfdropbox.comnullterrymsample@gexams.comnull
nullnull7073d0fab1ea36cd0c0f1f603a2a5e44b931b31clinkedin.comnullhinesh_patel@bat.comnull
nullcotanda_a@hotmail.comdbb11d1b1c0affb5a8816a6694706326badoo.comnullnullnull
nullkonelamine73@hotmail.fr35248838f61bf7198c0af5c88841553fbadoo.comnullnullnull
nullnullnullCollectionsnulldevid119@mail.rupopa524408
nullnullf661e87dcaab9d2db81bb649be345e361c54ba9blinkedin.comnull38817989null
nullnullnullCollectionsnullwj1153@hotmail.com636119
nullnulla4095f0b81cf5884a1fa96d9ce242869b879d9a9dropbox.comnulltuomo.longi@gmail.comnull
nullnull06983cdc044371d7ede4ddba1ad005e8eb6ec684linkedin.comnull114473008null
nullnull25b849eb6e8e12c2a4a406857a8781a5f8ad51calinkedin.comnull64386694null
nullvaliagr62@yahoo.gr9a6a8238283ce66115d67dbb40b2ea2dbadoo.comnullnullnull
nullnullnulllinkedin.comnullanaxga40@hotmail.comxxx
nullnull$2a$08$f0uriaT.Oq0UFLBPEeBNsuvB1Dtu117whfFOPHVqlVCMKjejMqgKmdropbox.comnulltaylor@goearnhardt.comnull
nullnull7c4a8d09ca3762af61e59520943dc26494f8941blinkedin.comnull101529447null
222.50.72.204nullnull000webhost.comchsybk1587829995@qq.comsx76yn
nullnull$2a$08$GJSeglKNB/osnIrvuKYlmeFc.zPeUIbeCzU5HZr5WVEFTZd39vErmdropbox.comnullmike.morganstern@sandisk.comnull
nullnull8af3c28d8af126388e3e2a9dff9d24346a9ef237linkedin.comnull149918494null
nullnull3872e9319c1540ee157c7db42bbeb46c14443c05linkedin.comnullelizabeth.mcgowan@morganstanley.comnull
nullnullf3b40a3b2ffbbf6b0f585a64dc3c48b6351d1157linkedin.comnull73862054null
nullnulla63367b0593d6b1700e3d65a5d2f551807771ed5linkedin.comnull57312508null
nullnullbfa92743e0843b41db0964b155009aa299a29609dropbox.comnullheystekk@sjredwings.orgnull
nullnullnulllinkedin.comnull84395570xxx
nullnull75b744ef57c642b29d646da3a246ea721551a310linkedin.comnullconnieluther@sbcglobal.netnull
nullnullnullCollectionsnulleyalbat@icloud.comaa123123123
nullsarly74@hotmail.com3fe78a8acf5fda99de95303940a2420cbadoo.comnullnullnull
nullnull195a3bad1546f906a083d4ee534c5f48171471e9linkedin.comnull13793444null
nullvrcalleja@hotmail.com71d494fc206f454c9f161d18d265774abadoo.comnullnullnull
nullnull$2a$08$SXflGxj5wi45Acc9TJnKTeDagSJ8pC.bImX8BfeOOvsTNc.bP8KL.dropbox.comnullalexandraboogers@hotmail.comnull
nullnullnullCollectionsnullmrinfinaty69@yahoo.commeganfox
nullnulled4162ae73c5f27a765a79649cec6ef808646382linkedin.comnull160462036null
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99



Queries

Queries use Lucene query syntax. Please note that queries have changed, you no longer need to capitalize the first letter of each field, scylla will rectify automatially if you do use the capital letter. You will get a 500 error if your query is incorrect. Use the fields listed above to guide you. Full query syntax (including wildcards) are supported

Example search for passwords that start with ff
    
      password:ff*
    
  
This would match any passwords with a d in them and the username dave, dale, dane, etc.
    
      name:da?e password:*d*
    
  

API

The search API can be accessed by sending a GET request to this page with the Accept header set to Accept: application/json

GET https://scylla.sh/search?q=your_query&num=100&from=200

The above GET request grabs 1000 results of your_query starting at the 200th record. Pagination can be done using the "from" parameter. Queries return the first 10,000 hits.

Data is returned in JSON format like the following:

[
   {
      "_id":"hKW8WWsBBGJneKoTbFS-",
      "_index":"pw_data",
      "_score":19.8656,
      "_source":{
         "Domain":"exploit.in",
         "Email":"marin.vardic@zzf.hr",
         "Password":"freeshit"
      },
      "_type":"_doc"
   },
   {
      "_id":"_3PgVGsBBGJneKoTof0e",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"linkedin.com",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "PassHash":"a3f5b3b7c790e397b2d77eca31cd96bcd57c8700"
      },
      "_type":"_doc"
   },
   {
      "_id":"dBmbWmsBBGJneKoTZ5Wk",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"exploit.in",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "Password":"vili2005"
      },
      "_type":"_doc"
   }
]



Note you may use the fields below to guide you, but not all fields are returned with each query, only available fields. If fields are added, they will be appended to the list of available fields for query.

ToS

The information on this website is intended only for research purposes. Access has been given to security or other researchers for the purposes of research ONLY. Other than that I sincerely hope this data helps you with your projects and aids in your understanding of your or your organization's security posture. Much love.

- _hyp3ri0n

ToS Enforcement

The information on this website is intended only for research purposes. We search common database leak sites to ensure this is not being circulated for malicious use. We do have default logging turned on for this website which likely includes IP addresses and other identifiers. Please don't misuse this information as we will cooperate with law enforcement if it is.

By the way, for old users, by popular request there is no longer a cryptominer on this website.

- _hyp3ri0n

Donations

Donations for scylla.sh are currently on hold! If you want to help please donate to my father's kickstarter project as described above.

Issues and Bugs

Scylla is currently in beta-v0.1. There will be bugs, Please report bugs to the scylla open github repo. Here you will also find the scylla code, please feel free to open feature requests here as well. These let me know what the community wants out of this site and is supremely useful to me.