Home Help Me Help You Want your own scylla?
Follow @_hyp3ri0n

0-day Hunting

Though this project is personally mine (_hyp3ri0n) I have a super exciting project I wanted to point people to from my company Hyperion Gray. Please note it is non-free (not trying to bait and switch you). If you use this project you're likely interested in this :). Information can be found here

Want to help?

Hey folks! Thanks for using scylla.sh and welcome! This is and always will be free. Direct donations to scylla.sh are on hold, If you want to help me out personally because you use or like this project, my father has a side project for an app-based automated drip irrigation system for growing plants in your house (hint: it works well for weeds of a certain nature in legal states). Instead of support to scylla check out and donate to his Kickstarter if it looks interesting to you. Every tiny bit helps! Thanks everyone!

Why Scylla?

scylla.sh has two major goals. One is to have a community-oriented database leak community and make a useful tool for security researchers

The other major goal is to undercut those people that are selling databases. If we can provide a free product here, we are eating into the bottom-line of those people selling leaked dbs for thousands of dollars. This de-incentivises buying of those DBs and therefore posting them in the first place. Even places that are supposedly "ethical" (looking at you HIBP) still have no problem selling your data. scylla.sh is and *will always* be free with an open API.

*Search is in beta, please report bugs to the scylla github repo

ipuserpasshashdomainnameemailpassword
nullblackx-misra@hotmail.comc436b47a7855f28b92f27c495184473cbadoo.comnullnullnull
nullnull4952778eca3a3022743d837e4540d156d3b9f129dropbox.comnullekolson715@gmail.comnull
nullnullnullCollectionsnullmarwa196@yahoo.commarwamarwa
nullnullnulllinkedin.comnull104975281xxx
nullnull1411678a0b9e25ee2f7c8b2f7ac92b6a74b3f9c5linkedin.comnull127800626null
nullnullnullCollectionsnullvictor.glasa@student.stenden.comapeland
nullm.badura@interia.pl77cb0822c051d3c35b82c4f7f66164eebadoo.comnullnullnull
nullnulle765d22eab603cc04eb1d1c7ab285604851a6e47linkedin.comnullKdidwilliams@verizon.netnull
nullnullnullCollectionsnullsgodinez81@gmail.comanimallover
nullrumifox@gmail.comf379eaf3c831b04de153469d1bec345ebadoo.comnullnullnull
nullnullc5e497355fead416c7787323196920deb2409c37linkedin.comnullivan_cracking@yahoo.comnull
nullnullc0dfcbc7f668ca21c1a1e547d9271a0d5c486075linkedin.comnullrparde@hotmail.comnull
nullnull74676e2e3bfc862414ebc6e4ddcc392d01c99318linkedin.comnullsubhash.booknest@gmail.comnull
nullnull27ee64ea4ba02265d1c537b651f613e83814414bdropbox.comnullsoenenleo@hotmail.comnull
nullnull62848ffe51f46c086cecfe31f96da41aad7679afdropbox.comnullvad_fox@mail.runull
nullnull7f0604fec62874438501b02713e5bef59dc2e553linkedin.comnull6730758null
nullnull3be18d81b31f817ca31005adf2edbe5ae9cb9c7flinkedin.comnulltrevbell@me.comnull
nullnullnull7k7k.comnulllibibo@tianya.cn51800
nullnullf8281d9a1167056d944023fe9f524af41408f328dropbox.comnullnjws@loadnewyork.comnull
nullnullnullCollectionsnullfr.dilenardo@hotmail.com15122000
180.215.171.29nullnull000webhost.comMrinmoy Roydroidroy65@gmail.comnegianushka12
nullnullnullCollectionsnullcrudelitas@gmx.netchina007
nullnull3872e9319c1540ee157c7db42bbeb46c14443c05linkedin.comnull153187438null
nullnullnullCollectionsnullqiuyibin170@163.com24c10b85a
nullnullcf71c6e528203b02f13ad32711e59c3c2eaf0e20dropbox.comnullheatherf@midvalley.comnull
nullnullnullCollectionsnullinvisible_kenkaku@hotmail.comkatana
99.122.145.249nullnull000webhost.comMotoX45brap454@gmail.comfourfive45
nullnull73dc892ff1a9d17749c6a416d6327af0156c7350linkedin.comnull54829964null
nullnullnullCollectionsnulltek939@mail.ruUfhhbgjnnth
nullnull4d62f06bbf56c75576acc27ba9e1519834f2b31flinkedin.comnull162712959null
nullnull4168291398d686e2b9b8b36acb317ebdd0d36082linkedin.comnull140519543null
nullnull023fa25adfbb898438762515abd5cd574cc3c91flinkedin.comnullbuculeu@yahoo.comnull
nullelisa.giorgini@virgilio.ite576cb6afdff4e76bac30717d46ef971badoo.comnullnullnull
nullnullb137593eb69dff2701fcc01d96fe305876b2c2adlinkedin.comnull164756139null
nulllucamarcobonelli@libero.it0e9212587d373ca58e9bada0c15e6fe4badoo.comnullnullnull
nullnotjustme91@yahoo.com319ce490277ffb0c889674b81e547635badoo.comnullnullnull
nullnulla2622c697d9f45e52d8390d9cb8d13aeba314a09linkedin.comnulljavier_portuguez64@hotmail.comnull
nulla.calvaer@gmail.com8bfc008a37cf20ef8bd91935bf40711ebadoo.comnullnullnull
nullnullda4435f42fa72d2b9cbb480dcc5193882f69d725linkedin.comnullprofessorjafri@hotmail.comnull
nullnullnullCollectionsnull870e93bc-97f2-4dce-ab6f-a5abdee0b644@xiaonei.com275604140xiaonei
nullnullnullCollectionsnullgatitocmc@hotmail.comantenita
nullnull50b40fc795a68cbc5405a54dd47d6a1c983adfd2linkedin.comnull75528703null
nullnullnullCollectionsnullThorsga4b3e6n0i
nullnulldb3dc6562b93f6fb6f647bc2327199b08ee5ba85linkedin.comnull162673618null
nullnull$2a$08$z9PHmZ.18UFE5b4TkVUIPeQAb85g0ty0c3uSK7PC/Mae5NToeiATKdropbox.comnullxsuprem@gmail.comnull
nullnull1e89b1396aa09f5ffa1fa041cb97afc391d5a036dropbox.comnullramakrishnan.n@adarshaautomation.comnull
nullnull50e3ea5568eede972c28e50f76000dda4e3fc667linkedin.comnull44261519null
nullnull5c304287127b8088a41d2744d0a04dfbff355ef2linkedin.comnull84511464null
nullnullnullCollectionsnullharry1211@hotmail.nlsjakie
nullnull78add6a0faaa60b3b35e830e56681c862b5fca71linkedin.comnull55625323null
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99



Queries

Queries use Lucene query syntax. Please note that queries have changed, you no longer need to capitalize the first letter of each field, scylla will rectify automatially if you do use the capital letter. You will get a 500 error if your query is incorrect. Use the fields listed above to guide you. Full query syntax (including wildcards) are supported

Example search for passwords that start with ff
    
      password:ff*
    
  
This would match any passwords with a d in them and the username dave, dale, dane, etc.
    
      name:da?e password:*d*
    
  

API

The search API can be accessed by sending a GET request to this page with the Accept header set to Accept: application/json

GET https://scylla.sh/search?q=your_query&num=100&from=200

The above GET request grabs 1000 results of your_query starting at the 200th record. Pagination can be done using the "from" parameter. Queries return the first 10,000 hits.

Data is returned in JSON format like the following:

[
   {
      "_id":"hKW8WWsBBGJneKoTbFS-",
      "_index":"pw_data",
      "_score":19.8656,
      "_source":{
         "Domain":"exploit.in",
         "Email":"marin.vardic@zzf.hr",
         "Password":"freeshit"
      },
      "_type":"_doc"
   },
   {
      "_id":"_3PgVGsBBGJneKoTof0e",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"linkedin.com",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "PassHash":"a3f5b3b7c790e397b2d77eca31cd96bcd57c8700"
      },
      "_type":"_doc"
   },
   {
      "_id":"dBmbWmsBBGJneKoTZ5Wk",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"exploit.in",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "Password":"vili2005"
      },
      "_type":"_doc"
   }
]



Note you may use the fields below to guide you, but not all fields are returned with each query, only available fields. If fields are added, they will be appended to the list of available fields for query.

ToS

The information on this website is intended only for research purposes. Access has been given to security or other researchers for the purposes of research ONLY. Other than that I sincerely hope this data helps you with your projects and aids in your understanding of your or your organization's security posture. Much love.

- _hyp3ri0n

ToS Enforcement

The information on this website is intended only for research purposes. We search common database leak sites to ensure this is not being circulated for malicious use. We do have default logging turned on for this website which likely includes IP addresses and other identifiers. Please don't misuse this information as we will cooperate with law enforcement if it is.

By the way, for old users, by popular request there is no longer a cryptominer on this website.

- _hyp3ri0n

Donations

Donations for scylla.sh are currently on hold! If you want to help please donate to my father's kickstarter project as described above.

Issues and Bugs

Scylla is currently in beta-v0.1. There will be bugs, Please report bugs to the scylla open github repo. Here you will also find the scylla code, please feel free to open feature requests here as well. These let me know what the community wants out of this site and is supremely useful to me.