Home Help Me Help You Want your own scylla?
Follow @_hyp3ri0n

0-day Hunting

Though this project is personally mine (_hyp3ri0n) I have a super exciting project I wanted to point people to from my company Hyperion Gray. Please note it is non-free (not trying to bait and switch you). If you use this project you're likely interested in this :). Information can be found here

Want to help?

Hey folks! Thanks for using scylla.sh and welcome! This is and always will be free. Direct donations to scylla.sh are on hold, If you want to help me out personally because you use or like this project, my father has a side project for an app-based automated drip irrigation system for growing plants in your house (hint: it works well for weeds of a certain nature in legal states). Instead of support to scylla check out and donate to his Kickstarter if it looks interesting to you. Every tiny bit helps! Thanks everyone!

Why Scylla?

scylla.sh has two major goals. One is to have a community-oriented database leak community and make a useful tool for security researchers

The other major goal is to undercut those people that are selling databases. If we can provide a free product here, we are eating into the bottom-line of those people selling leaked dbs for thousands of dollars. This de-incentivises buying of those DBs and therefore posting them in the first place. Even places that are supposedly "ethical" (looking at you HIBP) still have no problem selling your data. scylla.sh is and *will always* be free with an open API.

*Search is in beta, please report bugs to the scylla github repo

ipusernameuserpasshashdomainnameemailpassword
nullnullnullnullCollectionsnullzhdesi@163.com636150oO
nullnulll_colloca@hotmail.come9614afa0bf88a79a4b2772483a416f6badoo.comnullnullnull
nullnullnulla54aaf534b892e4453c467394270760775ea29cclinkedin.comnull13670548null
nullnullnullnulllinkedin.comnull154301941xxx
nullnullnull8f6b5712721c535a1ef28dbbaa789ed243fcd6e1linkedin.comnull91283603null
nullnullnull44fda8b9279f074f151d8afe36c833e9881dafaclinkedin.comnull17653929null
nullnulldohertyismaila@yahoo.comb1e2196e308e6dbc4657dd8f3b2a380cbadoo.comnullnullnull
nullnullnulldb1ba0549b065ea59e1441675011d73863fb6d83linkedin.comnull146581324null
nullnullnulle0526b1790432858503513ebfc1ed2eb8fa3fd0blinkedin.comnull139885677null
nullnullnull$2a$08$jbQ60xaXEOp694Cv/gOqmelfWVWTxc1cYfrn01vwCKHdWg1uucUemdropbox.comnullfazil_shaikh2001@yahoo.comnull
nullnullnullnulllinkedin.comnullronib60@hotmail.comxxx
nullnullnullnulllinkedin.comnull166412791xxx
nullnullnull70d22731996dce7b42dc5c92da8a4290dcc7f217linkedin.comnull25285503null
97.94.163.119reecandersonYTnull66cb68c9d23751108448252efd0011fe2d6e41e01bab990a4fe382bc2d37e0e9d027d98bcf0505ff455f120708508b2e784eb5accfc6a78a558aa2c40c79bd2fleet.ccnullapplex.sjek@gmail.comnull
nullnullnullf7c3bc1d808e04732adf679965ccc34ca7ae3441linkedin.comnull60597408null
nullnullselian6@hotmail.comdb058d5c3b6d3fe4c81b23fd350c94a0badoo.comnullnullnull
nullnullnullc9fddde55ed02cf678596b8b47a501e89231d9afdropbox.comnullamilgram@finsvcs.comnull
nullnullnullnullCollectionsnull623620818@qq.comw623620818
nullnullnullnulllinkedin.comnull153985520xxx
nullnullnullf2a5fe919d517f66248251134b2f135a98ea0f47linkedin.comnulljaninajohannsen@freenet.denull
nullnullnulld4dc1ce3e71f86ac659fa8cca4490026da847e37linkedin.comnullppajon@aol.comnull
nullnullnullnullCollectionsnullfeuridani64@gmx.netlecken211
nullnullnull292067ac32f93a5013f53ec1b842af426d007e10linkedin.comnull71189299null
nullnullnullnullCollectionsnullffm-chai-lisa@hotmail.deffmchai
nullnullnullnullCollectionsnullmehmetaliuyar_33@hotmail.com1234567
nullnullnulla749b4a51831ab7b7363de1c90c824fec1da90delinkedin.comnull170400590null
nullnullnullnullCollectionsnullkorshunova1982@mail.ruLbfyyxbr
nullnullcristinalapuste@yahoo.com40b3e9b65e6606d5a2e7771dfe1793cbbadoo.comnullnullnull
nullnullnullnulllinkedin.comnull46183391 xxx -> pwagency@chaffee.net
nullnullvivien54200@live.fr0fa9a61dcebb5cf6cf98a08d9ef8084bbadoo.comnullnullnull
nullnullo_b98@hotmail.com9f21628642d4795c6e5c6bb3e9374f08badoo.comnullnullnull
nullnullnullnulllinkedin.comnull36165812xxx
nullnullnull$2a$08$Y6udCZDgBqjj6JT76jgsa.Zp9UVgYWp/iQQjIG6xOtT5S8Qo1qQQSdropbox.comnullcathieabeck@gmail.comnull
nullnullnull40ae81b0a6d07eab4adf520bc758c23e35c7d4a0dropbox.comnulljcdelgado30@gmail.comnull
nullnullnullnullCollectionsnullkissel@hotmail.comqwe
nullnullnullnullCollectionsnullbitoy@wideout.combitoys
nullnullnull8a59dfbb1690c9ecb42b36ead6e85efdeaf63d1elinkedin.comnull126557017null
nullnullnullnulllinkedin.comnull159984551xxx
nullnullnull$2a$08$4cK3N6qIRh8CgwEjAcF32eOsva335plIigrTDvZ3zlUHzbIX/d5l.dropbox.comnullkhaled-ti@hotmail.comnull
nullnullnullnullCollectionsnullrichkerri@xtra.co.nzcheese
nullnullnullnulllinkedin.comnull23255932xxx
nullnullnull0ae0bae7e34f498b87d16dce5a8cb7b197c9d97dlinkedin.comnullpbakker@iinet.net.aunull
nullnullmhuescar@enerpal.com79c784cac64a42dcf2e449069aa5cf52badoo.comnullnullnull
nullnullnullnullCollectionsnullbjosie55@yahoo.com989656
31.59.99.99nullnullnull000webhost.comMaryam Bimaryam.babeai@gmail.com4WAhlwO9GrWIBCE588YR
nullnullnullaa60b19cebe595f237f2ca655e4c7611ab1b84f3linkedin.comnull141541895null
nullnullnullnulllinkedin.comnulljoaquingarridogarcia@gmail.comxxx
nullnullnullnullCollectionsnullcoe676301@testwww.commandersofevony.comff6029b8
nullnulllaetytia66@hotmail.frd1cbcc06c38f8570ad2867aad209b125badoo.comnullnullnull
nullnullnullnulllinkedin.comnull150630230xxx
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99



Queries

Queries use Lucene query syntax. Please note that queries have changed, you no longer need to capitalize the first letter of each field, scylla will rectify automatially if you do use the capital letter. You will get a 500 error if your query is incorrect. Use the fields listed above to guide you. Full query syntax (including wildcards) are supported

Example search for passwords that start with ff
    
      password:ff*
    
  
This would match any passwords with a d in them and the username dave, dale, dane, etc.
    
      name:da?e password:*d*
    
  

API

The search API can be accessed by sending a GET request to this page with the Accept header set to Accept: application/json

GET https://scylla.sh/search?q=your_query&num=100&from=200

The above GET request grabs 1000 results of your_query starting at the 200th record. Pagination can be done using the "from" parameter. Queries return the first 10,000 hits.

Data is returned in JSON format like the following:

[
   {
      "_id":"hKW8WWsBBGJneKoTbFS-",
      "_index":"pw_data",
      "_score":19.8656,
      "_source":{
         "Domain":"exploit.in",
         "Email":"marin.vardic@zzf.hr",
         "Password":"freeshit"
      },
      "_type":"_doc"
   },
   {
      "_id":"_3PgVGsBBGJneKoTof0e",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"linkedin.com",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "PassHash":"a3f5b3b7c790e397b2d77eca31cd96bcd57c8700"
      },
      "_type":"_doc"
   },
   {
      "_id":"dBmbWmsBBGJneKoTZ5Wk",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"exploit.in",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "Password":"vili2005"
      },
      "_type":"_doc"
   }
]



Note you may use the fields below to guide you, but not all fields are returned with each query, only available fields. If fields are added, they will be appended to the list of available fields for query.

ToS

The information on this website is intended only for research purposes. Access has been given to security or other researchers for the purposes of research ONLY. Other than that I sincerely hope this data helps you with your projects and aids in your understanding of your or your organization's security posture. Much love.

- _hyp3ri0n

ToS Enforcement

The information on this website is intended only for research purposes. We search common database leak sites to ensure this is not being circulated for malicious use. We do have default logging turned on for this website which likely includes IP addresses and other identifiers. Please don't misuse this information as we will cooperate with law enforcement if it is.

By the way, for old users, by popular request there is no longer a cryptominer on this website.

- _hyp3ri0n

Donations

Donations for scylla.sh are currently on hold! If you want to help please donate to my father's kickstarter project as described above.

Issues and Bugs

Scylla is currently in beta-v0.1. There will be bugs, Please report bugs to the scylla open github repo. Here you will also find the scylla code, please feel free to open feature requests here as well. These let me know what the community wants out of this site and is supremely useful to me.