Home Help Me Help You Want your own scylla?
Follow @_hyp3ri0n

0-day Hunting

Though this project is personally mine (_hyp3ri0n) I have a super exciting project I wanted to point people to from my company Hyperion Gray. Please note it is non-free (not trying to bait and switch you). If you use this project you're likely interested in this :). Information can be found here

Want to help?

Hey folks! Thanks for using scylla.sh and welcome! This is and always will be free. Direct donations to scylla.sh are on hold, If you want to help me out personally because you use or like this project, my father has a side project for an app-based automated drip irrigation system for growing plants in your house (hint: it works well for weeds of a certain nature in legal states). Instead of support to scylla check out and donate to his Kickstarter if it looks interesting to you. Every tiny bit helps! Thanks everyone!

Why Scylla?

scylla.sh has two major goals. One is to have a community-oriented database leak community and make a useful tool for security researchers

The other major goal is to undercut those people that are selling databases. If we can provide a free product here, we are eating into the bottom-line of those people selling leaked dbs for thousands of dollars. This de-incentivises buying of those DBs and therefore posting them in the first place. Even places that are supposedly "ethical" (looking at you HIBP) still have no problem selling your data. scylla.sh is and *will always* be free with an open API.

*Search is in beta, please report bugs to the scylla github repo

ipusernameuserpasssaltpasshashdomainnameemailpassword
nullnullnullnullnulllinkedin.comnull122110520xxx
nullnullnullnullnullCollectionsnulljim0038@hotmail.comjamestired
nullnullnullnull8c55e08cf6af2e90679ca6e4e1f20b6390c052b8dropbox.comnullmatt.pinter@gmail.comnull
nullnullnullnullba1319bb50988135c2760b6840bef313c721006alinkedin.comnullkakafan_acmln@hotmail.comnull
nullnullnullnullnullCollectionsnullong.noemie@yahoo.com1@a@2@
nullnullnullnullnull7k7k.comnullliuxiang@stu.snnu.edu.cn19851225
nullnullnullnullnullCollectionsnullLucKeegan@Hotmail.comnoeynar
nullnullnullnullnulllinkedin.comnull47309451xxx
nullnullnullnull7d9e20aae10b37814c7f38206b15b6fcbf4787c8linkedin.comnull138519223null
nullnullnullnull2fae185fca40877df9ec46aae85aef38294d9ea8linkedin.comnull107883869null
nullnullv12costa@yahoo.frnulla4e0de2f63a574da4a92c0c9c38d8d3ebadoo.comnullnullnull
77.198.54.11nullnullnullnull000webhost.comahmadjaber-ahmad@hotmail.comhamada123
nullnullnullnullnullCollectionsnulla_mirza20@yahoo.comkimmey
nullnullnullnullbb92f6d98b7f470f40b1a2987d21966d1fac845edropbox.comnullsusandconner@gmail.comnull
nullnullnullnull4bdcf4a3661abc8c245f014b68fb30c42df6f909linkedin.comnull100255475null
nullnullnullnullnulllinkedin.comnull26434800xxx
nullnullnullnull99047937b6fdde001a7360465296265c49be9c34dropbox.comnullshameedmohammed@hotmail.comnull
nullnullnullnullnulllinkedin.comnull137226282xxx
68.0.89.82bazraliannullnullb937d1c6c48ec4ac068fc475345e3a6873370a1dd23834f79d9435400eba583f5a304a1fe99848c24ed5a084dfb0808b1d446bd5c627008c3ea89b08e0d986c8leet.ccnullnullnull
nullnullsedat_hat@hotmail.comnull9583ba9c2aa9daa5f9d152d02a91f811badoo.comnullnullnull
nullnullnullnullnulllinkedin.comnull12600261xxx
nullnullnullnullnullCollectionsnullben_tlusty@walla.co.ilcici14
nullnullnullnullnullCollectionsnullulan.kaz@mail.ri123456789u
nullnullnullnullnullCollectionsnullamirul_helmy@hotmail.com310997
nullnullnullnullnullCollectionsnullthereangel@163.comangel5094
nullnullnullnull0edded994f0bb9adb6c5187e17e73a8e4a90a549linkedin.comnulllotus000@live.frnull
nullnullnullnull67eb405b921e061d3efccebbab87d1de682dae8edropbox.comnullgabrielbuica@hotmail.comnull
nullnullromi_sol13@hotmail.comnull9ee00d5f235862d47bc2c0c2242555dabadoo.comnullnullnull
nullnullnullnull75fd69cf4bb0c2a9f4ca78fc430d5c41f253b724linkedin.comnullmatt_kormos@hotmail.comnull
nullnullnullnullnullCollectionsnullpumino2012@hotmail.com06042542
nullnullnullnull95177e15ab0af274d815759057614caedba59cd4linkedin.comnull61260903null
nullnullnullnull4f78d60f21d6ed551116d890d71f80393bdfd737dropbox.comnullbriganty@hotmail.comnull
nullnullnullnullnulllinkedin.comnull142302000xxx
nullnullnullnullnullCollectionsnullkirsten-hamster@live.nlfliepkip
nullnullnullnullnullCollectionsnulltim11@windowslive.comharare84
nullnullnullnullnulllinkedin.comnull19143141xxx
nullnullnullnullc987517449a1edeb234557a641ed4042004fedd3linkedin.comnulldri_assuzena@hotmail.comnull
nullnullendi_ceylan@hotmail.comnullb07f55030c3ec38ab26eeffa982c43dfbadoo.comnullnullnull
nullnullnullnullf894bab722362677d2544c56aacd5fa3229df4a5linkedin.comnull112574775null
76.254.5.72misaly1null5*S0*fo)PgQOR3_m_=Q,tXae96d6abb668b7a2a69391c5fcde24d2WiiUISO.comnullmacau003@live.comnull
nullnullnullnullfcf1f048b05f3147d383a8094da25dc5fd24b24blinkedin.comnull89234017null
nullnullnullnullnullCollectionsnullpacoce48@email.commaps
nullnullnullnull$2a$08$93HcHdusnyHf/DvxJUfE5uycdguMJ6ljrMbIdtYZ/k8OYFYZj0Z/6dropbox.comnulltoin01@yahoo.com.mxnull
nullnullgalou2824@hotmail.frnull1402d2dbd65114619c645605235d68b3badoo.comnullnullnull
nullnullnullnull0ee1430589353bb64ad9ef983b9e6cd15ba6c177linkedin.comnull20032798null
nullnullnullnull63d2c0cdc17c1f3d79629b4ce9ea6c524fe51ee9linkedin.comnull65248995null
nullnullnullnullnulllinkedin.comnull142830160xxx
nullnullnullnull06be3998db8f44620b43fc955a7ecd09d3fc7378linkedin.comnullmauro.diblasi@gmail.comnull
nullnullnullnullnullCollectionsnulladprocks@gmail.comghengis
nullnullnullnull$2a$08$S.ltwdSqSafSqe4DfZRUvOaaX1S/a1E5XELaXAcaAA.xriDBxn2Nudropbox.comnullpjuge@free.frnull
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99



Queries

Queries use Lucene query syntax. Please note that queries have changed, you no longer need to capitalize the first letter of each field, scylla will rectify automatially if you do use the capital letter. You will get a 500 error if your query is incorrect. Use the fields listed above to guide you. Full query syntax (including wildcards) are supported

Example search for passwords that start with ff
    
      password:ff*
    
  
This would match any passwords with a d in them and the username dave, dale, dane, etc.
    
      name:da?e password:*d*
    
  

API

The search API can be accessed by sending a GET request to this page with the Accept header set to Accept: application/json

GET https://scylla.sh/search?q=your_query&num=100&from=200

The above GET request grabs 1000 results of your_query starting at the 200th record. Pagination can be done using the "from" parameter. Queries return the first 10,000 hits.

Data is returned in JSON format like the following:

[
   {
      "_id":"hKW8WWsBBGJneKoTbFS-",
      "_index":"pw_data",
      "_score":19.8656,
      "_source":{
         "Domain":"exploit.in",
         "Email":"marin.vardic@zzf.hr",
         "Password":"freeshit"
      },
      "_type":"_doc"
   },
   {
      "_id":"_3PgVGsBBGJneKoTof0e",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"linkedin.com",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "PassHash":"a3f5b3b7c790e397b2d77eca31cd96bcd57c8700"
      },
      "_type":"_doc"
   },
   {
      "_id":"dBmbWmsBBGJneKoTZ5Wk",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"exploit.in",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "Password":"vili2005"
      },
      "_type":"_doc"
   }
]



Note you may use the fields below to guide you, but not all fields are returned with each query, only available fields. If fields are added, they will be appended to the list of available fields for query.

ToS

The information on this website is intended only for research purposes. Access has been given to security or other researchers for the purposes of research ONLY. Other than that I sincerely hope this data helps you with your projects and aids in your understanding of your or your organization's security posture. Much love.

- _hyp3ri0n

ToS Enforcement

The information on this website is intended only for research purposes. We search common database leak sites to ensure this is not being circulated for malicious use. We do have default logging turned on for this website which likely includes IP addresses and other identifiers. Please don't misuse this information as we will cooperate with law enforcement if it is.

By the way, for old users, by popular request there is no longer a cryptominer on this website.

- _hyp3ri0n

Donations

Donations for scylla.sh are currently on hold! If you want to help please donate to my father's kickstarter project as described above.

Issues and Bugs

Scylla is currently in beta-v0.1. There will be bugs, Please report bugs to the scylla open github repo. Here you will also find the scylla code, please feel free to open feature requests here as well. These let me know what the community wants out of this site and is supremely useful to me.