Home Help Me Help You Want your own scylla?
Follow @_hyp3ri0n

0-day Hunting

Though this project is personally mine (_hyp3ri0n) I have a super exciting project I wanted to point people to from my company Hyperion Gray. Please note it is non-free (not trying to bait and switch you). If you use this project you're likely interested in this :). Information can be found here

Want to help?

Hey folks! Thanks for using scylla.sh and welcome! This is and always will be free. Direct donations to scylla.sh are on hold, If you want to help me out personally because you use or like this project, my father has a side project for an app-based automated drip irrigation system for growing plants in your house (hint: it works well for weeds of a certain nature in legal states). Instead of support to scylla check out and donate to his Kickstarter if it looks interesting to you. Every tiny bit helps! Thanks everyone!

Why Scylla?

scylla.sh has two major goals. One is to have a community-oriented database leak community and make a useful tool for security researchers

The other major goal is to undercut those people that are selling databases. If we can provide a free product here, we are eating into the bottom-line of those people selling leaked dbs for thousands of dollars. This de-incentivises buying of those DBs and therefore posting them in the first place. Even places that are supposedly "ethical" (looking at you HIBP) still have no problem selling your data. scylla.sh is and *will always* be free with an open API.

*Search is in beta, please report bugs to the scylla github repo

ipuserpasshashdomainnameemailpassword
nullnullnullCollectionsnullsangdang2@yahoo.comdoggydog
nulldick_mbambi@yahoo.fr5e8af5633b828a856a7c4c6180f33e7cbadoo.comnullnullnull
nullnullnullCollectionsnullcoe1150350@testwww.commandersofevony.com387de695
nullnullnulllinkedin.comnullsaadacustica@gmail.comxxx
nullnull2cf7d9626e435fab174a4df9a07580e1791b6039dropbox.comnulljanty.hatkwa@gmail.comnull
nullfanager@hanmail.net69a1cd24231f90c59e1f28ef87aca613badoo.comnullnullnull
nullnullnullCollectionsnullhannahbanana202@gmail.combiducao
nullshaqos@hotmail.fr76c93ac99eafe7fb84faf179cc579d5bbadoo.comnullnullnull
nullnullnulllinkedin.comnullpiyushvats@39yahoo.comxxx
nullmmiccoli78@yahoo.itfd350a0e64a50b4213fa994a604f3caebadoo.comnullnullnull
nullnullnullCollectionsnullbeejay_blud@hotmail.co.ukmiamiheat32
nullnullnullCollectionsnullsimon2@gmail.comhola
nullnullnullCollectionsnulluniklimbu61@yahoo.com27409182
nullmavimavilimtr@hotmail.comc9f1270d7d2af1c5ff08bdf080242a06badoo.comnullnullnull
nullnullnullCollectionsnullalexandradingo7999344@gmail.comqwerqwer2
nullnullnullCollectionsnullfallenangel_199@yahoo.dekillerhase199
nullnull7965a665163253a12f43312bf69d07012a113a2alinkedin.comnullbfinn@pathmark.comnull
nullnull1803aede99cf5f2e3f9f27f93533d8247ff17ee0linkedin.comnulljnparkerr@gmail.comnull
nullnullnullCollectionsnullnaruta_richard@yahoo.commonster
nullnull90da2e0297c3ce0de0601bff07f3e14918b153eblinkedin.comnullmir4of7@spamcop.netnull
nullnullnulllinkedin.comnull137550562xxx
nullnullfd163a851cef352c620b7020caabbdfb85fd9f04linkedin.comnull141664993null
nullabidelayo@yahoo.come17d38b96887337dcdc396c28b971b3fbadoo.comnullnullnull
nullnull751715baa977288c7cda411087e4fbce316c3b73linkedin.comnull55909244null
nullxinyao.bobo@gmail.comb11a199e91d619a384b60fec6047cf81badoo.comnullnullnull
nullnull3f7a1144193778cdb6881137d9329a9a70042ab7linkedin.comnullfelipebonzaum@hotmail.comnull
nullmouzaoui.madani@yahoo.comdb8ccb361f9450b5ea1f1f4af2a54b5dbadoo.comnullnullnull
nulll.schlemmer@hotmail.def7a7f0ec27aedb2985d2500d9c96efa3badoo.comnullnullnull
nullnullnulllinkedin.comnull91128022xxx
nullali-vip77@hotmail.com206f1f42ecf8b46af60ee97c6b51b26fbadoo.comnullnullnull
nullnullnullCollectionsnullposedon404@gmail.com9087654
189.152.13.22nullnull000webhost.comDarkenevviefcj939@yahoo.comnuwaqep834
nullnull6d52cd38f3a1029b6b7e209058f83b764ac41846linkedin.comnull144548815null
nullnullnulllinkedin.comnulllittlelindapinda@gmail.comxxx
nullnull1c463d9efbb4d837d5ef78b14719b62c39ca68delinkedin.comnull67623957null
nullnull$2a$08$ZCVxKryfOYebeIsDrnOpZOGDRB2vO8XI2.vnMbQola0pRqcG4OVcCdropbox.comnullnicolaou19@hotmail.comnull
nullnull$2a$08$4U9KL4XM.qV2.bT8j.lKr.Z1aIwpPmTUQPxwS6hutk7oXX.7TE9dadropbox.comnulldelores_johnson@att.netnull
nullnull2ac3909de7366ba9341d251f4efc63456d2849cflinkedin.comnull5075406null
nulldelfi1807@hotmail.com29d61ac6e4d3ca883625c528ab9f5dd6badoo.comnullnullnull
nullspies1977@yahoo.itab19dde2dd31b5abdb81506f791047fcbadoo.comnullnullnull
nullnulla03b447f36803e3f1a7f3c97cf1b150b2fbf25aclinkedin.comnull37210614null
nullnull5642d6bd54dfc309ae6c215a3cd7e43d4a22dc14linkedin.comnullngeno2009@yahoo.comnull
nullnull92bf5c6873f84eb5565700aa45b9b49b987e3837dropbox.comnullchris@spincreative.com.aunull
nullnull7df0620383bbe065f376952184e670abb36af1dclinkedin.comnull3235657null
nullturgayfindikli78@hotmail.com64ea56c708794e8dbf5a56158acf78cfbadoo.comnullnullnull
nullnullnullCollectionsnullbabalou109@yahoo.comgeunited
nullnullnullCollectionsnulllololo@yahoo.combadder
nullnullnulllinkedin.comnull43483901xxx
nullnullnullCollectionsnullosman_7-0_1905@hotmail.comosman
nullnullnullCollectionsnullnrjaizer@mail.rul2o0u1n0a
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99



Queries

Queries use Lucene query syntax. Please note that queries have changed, you no longer need to capitalize the first letter of each field, scylla will rectify automatially if you do use the capital letter. You will get a 500 error if your query is incorrect. Use the fields listed above to guide you. Full query syntax (including wildcards) are supported

Example search for passwords that start with ff
    
      password:ff*
    
  
This would match any passwords with a d in them and the username dave, dale, dane, etc.
    
      name:da?e password:*d*
    
  

API

The search API can be accessed by sending a GET request to this page with the Accept header set to Accept: application/json

GET https://scylla.sh/search?q=your_query&num=100&from=200

The above GET request grabs 1000 results of your_query starting at the 200th record. Pagination can be done using the "from" parameter. Queries return the first 10,000 hits.

Data is returned in JSON format like the following:

[
   {
      "_id":"hKW8WWsBBGJneKoTbFS-",
      "_index":"pw_data",
      "_score":19.8656,
      "_source":{
         "Domain":"exploit.in",
         "Email":"marin.vardic@zzf.hr",
         "Password":"freeshit"
      },
      "_type":"_doc"
   },
   {
      "_id":"_3PgVGsBBGJneKoTof0e",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"linkedin.com",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "PassHash":"a3f5b3b7c790e397b2d77eca31cd96bcd57c8700"
      },
      "_type":"_doc"
   },
   {
      "_id":"dBmbWmsBBGJneKoTZ5Wk",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"exploit.in",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "Password":"vili2005"
      },
      "_type":"_doc"
   }
]



Note you may use the fields below to guide you, but not all fields are returned with each query, only available fields. If fields are added, they will be appended to the list of available fields for query.

ToS

The information on this website is intended only for research purposes. Access has been given to security or other researchers for the purposes of research ONLY. Other than that I sincerely hope this data helps you with your projects and aids in your understanding of your or your organization's security posture. Much love.

- _hyp3ri0n

ToS Enforcement

The information on this website is intended only for research purposes. We search common database leak sites to ensure this is not being circulated for malicious use. We do have default logging turned on for this website which likely includes IP addresses and other identifiers. Please don't misuse this information as we will cooperate with law enforcement if it is.

By the way, for old users, by popular request there is no longer a cryptominer on this website.

- _hyp3ri0n

Donations

Donations for scylla.sh are currently on hold! If you want to help please donate to my father's kickstarter project as described above.

Issues and Bugs

Scylla is currently in beta-v0.1. There will be bugs, Please report bugs to the scylla open github repo. Here you will also find the scylla code, please feel free to open feature requests here as well. These let me know what the community wants out of this site and is supremely useful to me.