Home Help Me Help You Want your own scylla?
Follow @_hyp3ri0n

0-day Hunting

Though this project is personally mine (_hyp3ri0n) I have a super exciting project I wanted to point people to from my company Hyperion Gray. Please note it is non-free (not trying to bait and switch you). If you use this project you're likely interested in this :). Information can be found here

Want to help?

Hey folks! Thanks for using scylla.sh and welcome! This is and always will be free. Direct donations to scylla.sh are on hold, If you want to help me out personally because you use or like this project, my father has a side project for an app-based automated drip irrigation system for growing plants in your house (hint: it works well for weeds of a certain nature in legal states). Instead of support to scylla check out and donate to his Kickstarter if it looks interesting to you. Every tiny bit helps! Thanks everyone!

Why Scylla?

scylla.sh has two major goals. One is to have a community-oriented database leak community and make a useful tool for security researchers

The other major goal is to undercut those people that are selling databases. If we can provide a free product here, we are eating into the bottom-line of those people selling leaked dbs for thousands of dollars. This de-incentivises buying of those DBs and therefore posting them in the first place. Even places that are supposedly "ethical" (looking at you HIBP) still have no problem selling your data. scylla.sh is and *will always* be free with an open API.

*Search is in beta, please report bugs to the scylla github repo

ipuserpasssaltpasshashdomainnameemailpassword
nullrulo.lr@hotmail.comnullc0cebf0a56ac395ef43b5f4ab91078b9badoo.comnullnullnull
nullnullnull81d00e812eec3b137cbd28572a999aa2794a2aablinkedin.comnull102032203null
nullnullnull8497ed7f1dfe7e1314a3060eda01216e7730ff80dropbox.comnulltianyuan.zhao@utoronto.canull
nullsif2300@hotmail.frnull1065f46b412d18bc5cd296f95a947f79badoo.comnullnullnull
nullnullnull102e549ea2d09b6c5d035df0efc3c287e26471aalinkedin.comnull155407877null
nullnullnullba7dd17283dcbe5f3b403c4aa12f8c9a2a46e43elinkedin.comnullmohamed@proteam.aenull
nullnullnull5dc1952a0db2cc4a96a0da33ddae9522077ded77linkedin.comnull131941494null
nullnullnullnulllinkedin.comnull120310322xxx
nullmody-love-92@hotmail.comnull5492022a8e5353b09ee408e62163c947badoo.comnullnullnull
nullnullnullnullCollectionsnulldometep007@hotmail.com053642250
85.216.208.244nullnullnull000webhost.comStavebne Forumhumor.macak@gmail.comlkjhgf0
nullnullnullnullCollectionsnulldeea_mitik@yahoo.com1234567
nullnullnullnulllinkedin.comnullklgrandpre@gmail.comxxx
nullnullnullc4135bc73d4bc62cc7627b1e933de5abadf6c0d1linkedin.comnullcarlosrosado@cox.netnull
nullnullnulla5362eba98c360e766fbd67f83b140d2d653f4a9linkedin.comnull114543649null
nullnullnull$2a$08$Or/6kiLFORFkfB2qBTAHoOA08DWvbbmOtcINvDFflHZD3ObofZxxqdropbox.comnullfshnah@sbcglobal.netnull
nullnullnull2ac950c71454f9b1198d8938b8655ac882f95450linkedin.comnull98909228null
nullnullnull658b8be7670932e5b813d8b3df9ffcac0d932d70linkedin.comnull5498418null
nullnullnullnullCollectionsnull1292983023@qq.comm91820084
nullnullnull6477328c3a72ab9230906221e77a66732e619b74linkedin.comnullsamir879@yahoo.comnull
nullnullnullnullCollectionsnullfullsecret@hotmail.com19900826
nullnullnullnullCollectionsnullbooshee42@yahoo.comapril2
nullnullnull2243a0c829703564465d638c6adbaa94d06fba91linkedin.comnull111166044null
nullnikip@windowslive.comnullef55545f946e45e03b7977802546c398badoo.comnullnullnull
nullnullnull$2a$08$FpJChfFWMZEVJeBe.YW77.vRnSQigVPzPU0NseUJ.UAdt1f94GHoSdropbox.comnulljosh.jans@gmail.comnull
nullnullnullnulllinkedin.comnullsanaz_124@yahoo.comxxx
nullkatja1976@live.nlnull4b3a4577a7e60735474a2a072a6322f3badoo.comnullnullnull
nullmesse.rbawdas@gmail.comnull1b8c670a76667ad7676c9fe322f9df2abadoo.comnullnullnull
nullnicoslim85@yahoo.com.sgnull2179f21fa343b8e6fffb838b81d4465cbadoo.comnullnullnull
nullnullnullnullCollectionsnullbrewer1@gmail.combrewer1
nullbe_debora88@hotmail.comnull9311aef1f58c4d19947a35ba48dd7ec7badoo.comnullnullnull
nullnullnullnullCollectionsnullvit.lom@inbox.ruqazwsxedc
nullnullnullnulllinkedin.comnullalejandrocalcaterra@gmail.comxxx
nullnullnull$2a$08$ClZobi9d5GvaWCf6Mk6D..kKcSvtVYzwzsipT4wfXGMYeEyBMA2gqdropbox.comnullmayered@yahoo.comnull
nullnullnull97f3174bb15b38405cfd4f0ed5ccd0246a457cc2linkedin.comnull127042766null
nullnullnullnullCollectionsnullbenjamin@xorpal.deri9los7sec
nullnullnullnullCollectionsnullpourlesMMORPG@hotmail.comtoiplusquetous08
nullnullnullnullCollectionsnullstayls-2010@mail.ru59695969
nullnullnull$2a$08$wMcT..Ysa3mK48SRO4UquO4UFnwX3k/Gjl6sKVCXrpLYBSSHwfbIudropbox.comnullmike.spear@ntlworld.comnull
nullnullnull7e28e93bcce7a7fbb7099eeafe0619362352d796linkedin.comnullmark.riegner@usma.edunull
nullnullnullnulllinkedin.comnull84542690xxx
nullnullnull87df09acf87672aa810a1f5502b16abe8e64a59alinkedin.comnull48564436null
nullnullnullnullCollectionsnulldcstevez@yahoo.comNeutron1
nullnullnull1fa306d40312d6c4449a947f33e38a3b45971086linkedin.comnull16150779null
nullnullnullnulllinkedin.comnullrafi.bulin11@gmail.comxxx
nullnullnull03c0f08b5d390b13f8ebf05752fccc17d1112270linkedin.comnull9363303null
nullbaferju@hotmeil.esnulle37ab05d4ec8545e7baa2f0731c905f7badoo.comnullnullnull
nullnullnull6d74bb9c77ca9f81246e6401b9a52ac6e5ea9402linkedin.comnull21189257null
99.251.226.55Ziras Samardar15d9e93b96f5807e3be6938a3e14aceaba9abandonia.comnulltimothyosmond@gmail.comnull
nullavril_ramona@hotmail.itnullcf42f9f59f81bf93dfef05035f76daf9badoo.comnullnullnull
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99



Queries

Queries use Lucene query syntax. Please note that queries have changed, you no longer need to capitalize the first letter of each field, scylla will rectify automatially if you do use the capital letter. You will get a 500 error if your query is incorrect. Use the fields listed above to guide you. Full query syntax (including wildcards) are supported

Example search for passwords that start with ff
    
      password:ff*
    
  
This would match any passwords with a d in them and the username dave, dale, dane, etc.
    
      name:da?e password:*d*
    
  

API

The search API can be accessed by sending a GET request to this page with the Accept header set to Accept: application/json

GET https://scylla.sh/search?q=your_query&num=100&from=200

The above GET request grabs 1000 results of your_query starting at the 200th record. Pagination can be done using the "from" parameter. Queries return the first 10,000 hits.

Data is returned in JSON format like the following:

[
   {
      "_id":"hKW8WWsBBGJneKoTbFS-",
      "_index":"pw_data",
      "_score":19.8656,
      "_source":{
         "Domain":"exploit.in",
         "Email":"marin.vardic@zzf.hr",
         "Password":"freeshit"
      },
      "_type":"_doc"
   },
   {
      "_id":"_3PgVGsBBGJneKoTof0e",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"linkedin.com",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "PassHash":"a3f5b3b7c790e397b2d77eca31cd96bcd57c8700"
      },
      "_type":"_doc"
   },
   {
      "_id":"dBmbWmsBBGJneKoTZ5Wk",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"exploit.in",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "Password":"vili2005"
      },
      "_type":"_doc"
   }
]



Note you may use the fields below to guide you, but not all fields are returned with each query, only available fields. If fields are added, they will be appended to the list of available fields for query.

ToS

The information on this website is intended only for research purposes. Access has been given to security or other researchers for the purposes of research ONLY. Other than that I sincerely hope this data helps you with your projects and aids in your understanding of your or your organization's security posture. Much love.

- _hyp3ri0n

ToS Enforcement

The information on this website is intended only for research purposes. We search common database leak sites to ensure this is not being circulated for malicious use. We do have default logging turned on for this website which likely includes IP addresses and other identifiers. Please don't misuse this information as we will cooperate with law enforcement if it is.

By the way, for old users, by popular request there is no longer a cryptominer on this website.

- _hyp3ri0n

Donations

Donations for scylla.sh are currently on hold! If you want to help please donate to my father's kickstarter project as described above.

Issues and Bugs

Scylla is currently in beta-v0.1. There will be bugs, Please report bugs to the scylla open github repo. Here you will also find the scylla code, please feel free to open feature requests here as well. These let me know what the community wants out of this site and is supremely useful to me.