Home Help Me Help You Want your own scylla?
Follow @_hyp3ri0n

0-day Hunting

Though this project is personally mine (_hyp3ri0n) I have a super exciting project I wanted to point people to from my company Hyperion Gray. Please note it is non-free (not trying to bait and switch you). If you use this project you're likely interested in this :). Information can be found here

Want to help?

Hey folks! Thanks for using scylla.sh and welcome! This is and always will be free. Direct donations to scylla.sh are on hold, If you want to help me out personally because you use or like this project, my father has a side project for an app-based automated drip irrigation system for growing plants in your house (hint: it works well for weeds of a certain nature in legal states). Instead of support to scylla check out and donate to his Kickstarter if it looks interesting to you. Every tiny bit helps! Thanks everyone!

Why Scylla?

scylla.sh has two major goals. One is to have a community-oriented database leak community and make a useful tool for security researchers

The other major goal is to undercut those people that are selling databases. If we can provide a free product here, we are eating into the bottom-line of those people selling leaked dbs for thousands of dollars. This de-incentivises buying of those DBs and therefore posting them in the first place. Even places that are supposedly "ethical" (looking at you HIBP) still have no problem selling your data. scylla.sh is and *will always* be free with an open API.

*Search is in beta, please report bugs to the scylla github repo

ipusernameuserpasshashdomainnameemailpassword
nullnullminimanu2003@yahoo.fr3aff1c02ce82d903c8fe4efa71241ddabadoo.comnullnullnull
nullnullnullnullCollectionsnullbrav@nxt.runaxxaramas
nullnullnullnulllinkedin.comnullmonica.cisneros4@gmail.comxxx
nullnullnull$2a$08$01csBmYEnuUEwk/o6F8YPuXWHE2afJmFLMg.cBATjPt/0dcxb7tyWdropbox.comnullasesorams@vetaro.com.arnull
nullnullnullnulllinkedin.comnull53705610xxx
nullnullnullnull7k7k.comnull史今兵团团374587
nullnullnullnullCollectionsnullabakos@gmx.deTBBSam
nullnullnullnulllinkedin.comnullqtpie0806@aol.comxxx
nullnullnull$2a$08$JDivAlLtbA4Vw6/9GEPGdubDbu1qFr7T1f.InkI9id2Vbl5BKCrwydropbox.comnulldreamer.believer@live.comnull
nullnullkamiljandorosz@gmail.com1310bf8694c31b4e1c6ecb9368f9e70bbadoo.comnullnullnull
nullnullnullb36a8c4846d4df28a797aa464ab058165d33704flinkedin.comnull124698685null
nullnullnullnullCollectionsnullmark@waim.ussophia1
nullnullnull83cc220a00fa519079a054c0cbe06aeb3acec4a3linkedin.comnull138690027null
nullnullnullnullCollectionsnullgavazi.xp1@gmail.compassword mert123
nullnullnulle36a6a75d8488ac8f165cb3a961f159210197059linkedin.comnullwgciii@gmail.comnull
nullnullnullnullCollectionsnullilyas1999@hotmail.de12345678910
nullnullnull38f50ec7b2e7845dc8a6ceb68aaf3c5f875891e4linkedin.comnullinfo@wikiarte.comnull
nullnullnulla60c5047aebc24152b499519e14794d794a5cb80linkedin.comnull158033803null
nullnullnullnullCollectionsnullbawlsack14@hotmail.comabcc1234
nullnullpacomotos@hotmail.com8658183e29f91feea45438d923bdf554badoo.comnullnullnull
nullnulltasemihai@gmail.com0bade6a20e54e88c6c83cd82bccb5700badoo.comnullnullnull
nullnullnullnullCollectionsnulljahid15_2009@yahoo.com069162557
nullnullnullnullCollectionsnullaworkshop84@aol.comoliver
120.39.32.229nullnullnull000webhost.comhackercchackercc@msn.comec4apa1a_.0.
nullnullzaufajmi@yahoo.com60695a0ec14b1096946d5aedc467cc30badoo.comnullnullnull
nullnullnullfd08a95dbb8d59b12b0d29458dec6c3495b42143linkedin.comnull45345788null
nullnulltoyoto@hotmail.fr10e344021a400280b2a1de41dbfeff92badoo.comnullnullnull
nullnullnull$2a$08$8XnyqXbFzZy33ecoPUINqe6JRxTXO0JszqInPsYBTG22gtIAOAaeedropbox.comnullsciencedudester@gmail.comnull
nullnullnullnullCollectionsnullboysock_lockchock_timgirl9x@yahoo.com1235792468
nullnulldadasheva.sabina.90@mail.ru2ad42b81845229fcc484a87f26743980badoo.comnullnullnull
nullnullnullnullCollectionsnulld.saleri@gmail.comshopito123
nullnullnulla2d583757c174a529b9718ef53986d1f39d83e18dropbox.comnulluricocheacam@hotmail.comnull
nullnullnullb31a30abb68268f16aa9df17522f71367a98c993linkedin.comnullmarytere_chacon@hotmail.comnull
nullnullnullnulllinkedin.comnull120107592xxx
nullnulley_vaah_o_geldi@hotmail.combe83558381f6b265b8304b7eb09467cebadoo.comnullnullnull
nullnullnullnullCollectionsnulldylangonzalezgraf@icloud.comcajodyma
nullnulltonino_8382@hotmail.com063100697ec90370cf19673c9de11c83badoo.comnullnullnull
nullnullnullnullCollectionsnullrebake@gmail.com1111
nullnullnullnullCollectionsnullwisdumb@live.comnce8p2h1
nullnullshams-moon@windowslive.com05c1632e24dae99ae1a56d3e17cd9a2abadoo.comnullnullnull
nullnullperluna@ymail.com388672199354cc39958bdb969b2720d9badoo.comnullnullnull
nullnullflos_off@hotmail.fr87a882350fa422f88a001d77a9325e0fbadoo.comnullnullnull
nullnullnull82914f5dfe1454205b20a0c00990766d9705687fdropbox.comnullk.james@nhm.ac.uknull
nullnullnull34cb60d62f43f93d9ebb8aa1ff88664af71b284dlinkedin.comnullircania27@hotmail.comnull
nullnullnull409389c95403377a0dcafc9314e0fb3a409b51b9linkedin.comnull121136726null
nullnullnull86d1cb2d9e816bc68740e4f9f0d0f373511fd6balinkedin.comnull137222304null
nullnullnull$2a$08$SEmwkQB1EiKp9QuDm8nI3ekJ.iYYDA8bjhcfQSvh680kBwdGgcjWudropbox.comnullbukurova.elena@rambler.runull
nullnullnull$2a$08$o1x.Cf1Fp3Fvh7PNI4Esz.bqECMXFbGLflUDsgNMXUAp6gjFrm2kadropbox.comnullhultgren_simon@hotmail.comnull
nullnullnull9add66756b9d1ac5d1af9433546b30af0f78ceb5linkedin.comnullnullnull
nullwrite a booknullnullCollection1-grinderscape.orgnullnull:nummer7
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99



Queries

Queries use Lucene query syntax. Please note that queries have changed, you no longer need to capitalize the first letter of each field, scylla will rectify automatially if you do use the capital letter. You will get a 500 error if your query is incorrect. Use the fields listed above to guide you. Full query syntax (including wildcards) are supported

Example search for passwords that start with ff
    
      password:ff*
    
  
This would match any passwords with a d in them and the username dave, dale, dane, etc.
    
      name:da?e password:*d*
    
  

API

The search API can be accessed by sending a GET request to this page with the Accept header set to Accept: application/json

GET https://scylla.sh/search?q=your_query&num=100&from=200

The above GET request grabs 1000 results of your_query starting at the 200th record. Pagination can be done using the "from" parameter. Queries return the first 10,000 hits.

Data is returned in JSON format like the following:

[
   {
      "_id":"hKW8WWsBBGJneKoTbFS-",
      "_index":"pw_data",
      "_score":19.8656,
      "_source":{
         "Domain":"exploit.in",
         "Email":"marin.vardic@zzf.hr",
         "Password":"freeshit"
      },
      "_type":"_doc"
   },
   {
      "_id":"_3PgVGsBBGJneKoTof0e",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"linkedin.com",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "PassHash":"a3f5b3b7c790e397b2d77eca31cd96bcd57c8700"
      },
      "_type":"_doc"
   },
   {
      "_id":"dBmbWmsBBGJneKoTZ5Wk",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"exploit.in",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "Password":"vili2005"
      },
      "_type":"_doc"
   }
]



Note you may use the fields below to guide you, but not all fields are returned with each query, only available fields. If fields are added, they will be appended to the list of available fields for query.

ToS

The information on this website is intended only for research purposes. Access has been given to security or other researchers for the purposes of research ONLY. Other than that I sincerely hope this data helps you with your projects and aids in your understanding of your or your organization's security posture. Much love.

- _hyp3ri0n

ToS Enforcement

The information on this website is intended only for research purposes. We search common database leak sites to ensure this is not being circulated for malicious use. We do have default logging turned on for this website which likely includes IP addresses and other identifiers. Please don't misuse this information as we will cooperate with law enforcement if it is.

By the way, for old users, by popular request there is no longer a cryptominer on this website.

- _hyp3ri0n

Donations

Donations for scylla.sh are currently on hold! If you want to help please donate to my father's kickstarter project as described above.

Issues and Bugs

Scylla is currently in beta-v0.1. There will be bugs, Please report bugs to the scylla open github repo. Here you will also find the scylla code, please feel free to open feature requests here as well. These let me know what the community wants out of this site and is supremely useful to me.