Home Help Me Help You Want your own scylla?
Follow @_hyp3ri0n

0-day Hunting

Though this project is personally mine (_hyp3ri0n) I have a super exciting project I wanted to point people to from my company Hyperion Gray. Please note it is non-free (not trying to bait and switch you). If you use this project you're likely interested in this :). Information can be found here

Want to help?

Hey folks! Thanks for using scylla.sh and welcome! This is and always will be free. Direct donations to scylla.sh are on hold, If you want to help me out personally because you use or like this project, my father has a side project for an app-based automated drip irrigation system for growing plants in your house (hint: it works well for weeds of a certain nature in legal states). Instead of support to scylla check out and donate to his Kickstarter if it looks interesting to you. Every tiny bit helps! Thanks everyone!

Why Scylla?

scylla.sh has two major goals. One is to have a community-oriented database leak community and make a useful tool for security researchers

The other major goal is to undercut those people that are selling databases. If we can provide a free product here, we are eating into the bottom-line of those people selling leaked dbs for thousands of dollars. This de-incentivises buying of those DBs and therefore posting them in the first place. Even places that are supposedly "ethical" (looking at you HIBP) still have no problem selling your data. scylla.sh is and *will always* be free with an open API.

*Search is in beta, please report bugs to the scylla github repo

ipuserpasshashdomainnameemailpassword
nullnullnull7k7k.comnullTragedy_XXYL7448508
nullnullnullCollectionsnulllenyaleonid@list.ru123456789098765
nullaloveyou_7@hotmail.com67e9ef95da7b4fbdd09432c227a74b1ebadoo.comnullnullnull
nulldulce-veneno96@hotmail.com213207f009e697a7fa3e4843bc0dcd25badoo.comnullnullnull
nullnull0a950d19f191a359f289693b547150a5267741dbdropbox.comnullmh_dragon8@ybb.ne.jpnull
nullnull$2a$08$SJ4rELYuHNCRn.CICdeWROHot2daTcphUTUwYiU80FyObIk4v6Wwedropbox.comnullthiago.biasoli@hotmail.comnull
nulli-fuuck-th3-world@hotmail.fr3c99063bdc7a1e81e18850f685c3fd9cbadoo.comnullnullnull
nullnullnulllinkedin.comnullashishsharmabitu@gmail.comxxx
nullnullnulllinkedin.comnull136507391xxx
nullnull84434c91c23b687a3ee197540261e513d6fc63a4linkedin.comnullalon@hempel.comnull
nullnullnulllinkedin.comnull142249280xxx
nullnullb7f55d93b884eea022efda376187bcb588a9f55edropbox.comnullmickmouse55@yahoo.comnull
nullnull688238670d6fb6a949be93ed6b12a272665836balinkedin.comnullmassey_sunil@rediffmail.comnull
nullnullnullCollectionsnulljjenting@cox.netbrown17
nullmarina.zyrko.69@mail.ru45f3c8ac8d28d7a936dc004a10f5b427badoo.comnullnullnull
nullnull$2a$08$sY4CDgvj1e8u47troLFgX.PhUoZvvGVxNdIberSnHcQ0j6aSVPBVqdropbox.comnulls.gilgarcia@eleve-efb.frnull
nullnullnulllinkedin.comnulltrudeta@gmail.comxxx
nullnulld3a772ffc834c9a83a2fdcfdd78f36338f8bc0bclinkedin.comnull170055766null
nullnullnull7k7k.comnull4053469138451348239
177.177.84.213nullnull000webhost.comana lciaanabatista705@yahoo.com.br1212sapo
59.161.142.122nullnull000webhost.comvarmakanumurichaitanyavarma@mail.comervaccpymbbedm4
nullnull$2a$08$yVf3QCGo848mog0egqUjM.Js4R74.8daO4Wo/pVZFNeLGZv9qKUnidropbox.comnulllinhpham1011@gmail.comnull
nullnull$2a$08$xPo5sxUbh4mZe3Tne2qVIuW3F9pOO1IxwlOvUg2GovunDrCKqC3WSdropbox.comnulldomke.dieter@web.denull
nullnullnulllinkedin.comnull1295961xxx
91.210.102.149nullnull000webhost.comYeseniamomozyjahaz@hotmail.comJsZA6ROc0Z
nullnullf79d4464bca8e677f1ce3c8073a8d54d8f008319linkedin.comnullleaonortepe@hotmail.comnull
nullnullnullCollectionsnullchun_ting929@yahoo.com.hkabcdefg
nullnullnulllinkedin.comnullvisi-no-08@live.comxxx
nullalfredo.recchiuti@yahoo.it4bd6df9c81c0200b309e56c09273ce9dbadoo.comnullnullnull
nullnull9c86632d53faff25604d88b46ce49ff7d6ff23f0linkedin.comnull39056035null
nullnullnulllinkedin.comnull124404241xxx
nullnullnullCollectionsnulllsk_fox89@mail.rusvetik1
nullnullnulllinkedin.comnull166205721xxx
nullnullnullCollectionsnullBentley1605@hotmail.comfuku00198
nullgiopanda82@yahoo.it67e10fd7f741471c0ddd076416c8a390badoo.comnullnullnull
nullhuseyin_avci053@hotmail.com0bb900e248dadc619cb81c91e0a07c66badoo.comnullnullnull
nullnullf618205cc2a33af0dba2157a66e8b1b853fdc701linkedin.comnull14820883null
nullnullnull7k7k.comnullzelotren12323633874
nullnull65b5c6ff40ad8479b24dfcbd82b9fc16acaf343blinkedin.comnull109678068null
nullnullnullCollectionsnullnicogonalez0104@gmail.comnicole12
nullnullnullCollectionsnullerinwicker6@gmail.com04091999
nullnullb3babe4437e58bb5d1f50a69714f9010abf4724dlinkedin.comnull56229249null
nullhana.stodulkova@kocianka.czf4386c9f7884516f29ce50b867c0cf4cbadoo.comnullnullnull
nullnull3531ae1d48a7d1537061429daf1e93c119c00349linkedin.comnull13730923null
nullnullnullCollectionsnull376855108@qq.com8201223ly
nullnullnulllinkedin.comnull1531sally@gmail.comxxx
nullnull3e7b57e0c6dbcfe98a0ab96328e178ac353a7ebelinkedin.comnull115106283null
nullmissdream57@hotmail.fr8ca40eb40d197979a69361cea44ba188badoo.comnullnullnull
nullnullnulllinkedin.comnull1534581xxx
nullnull1e2b84a86e1a13a6c2cf213973e9cddf1fefbf80linkedin.comnullrajiv.grover06@gmail.comnull
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99



Queries

Queries use Lucene query syntax. Please note that queries have changed, you no longer need to capitalize the first letter of each field, scylla will rectify automatially if you do use the capital letter. You will get a 500 error if your query is incorrect. Use the fields listed above to guide you. Full query syntax (including wildcards) are supported

Example search for passwords that start with ff
    
      password:ff*
    
  
This would match any passwords with a d in them and the username dave, dale, dane, etc.
    
      name:da?e password:*d*
    
  

API

The search API can be accessed by sending a GET request to this page with the Accept header set to Accept: application/json

GET https://scylla.sh/search?q=your_query&num=100&from=200

The above GET request grabs 1000 results of your_query starting at the 200th record. Pagination can be done using the "from" parameter. Queries return the first 10,000 hits.

Data is returned in JSON format like the following:

[
   {
      "_id":"hKW8WWsBBGJneKoTbFS-",
      "_index":"pw_data",
      "_score":19.8656,
      "_source":{
         "Domain":"exploit.in",
         "Email":"marin.vardic@zzf.hr",
         "Password":"freeshit"
      },
      "_type":"_doc"
   },
   {
      "_id":"_3PgVGsBBGJneKoTof0e",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"linkedin.com",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "PassHash":"a3f5b3b7c790e397b2d77eca31cd96bcd57c8700"
      },
      "_type":"_doc"
   },
   {
      "_id":"dBmbWmsBBGJneKoTZ5Wk",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"exploit.in",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "Password":"vili2005"
      },
      "_type":"_doc"
   }
]



Note you may use the fields below to guide you, but not all fields are returned with each query, only available fields. If fields are added, they will be appended to the list of available fields for query.

ToS

The information on this website is intended only for research purposes. Access has been given to security or other researchers for the purposes of research ONLY. Other than that I sincerely hope this data helps you with your projects and aids in your understanding of your or your organization's security posture. Much love.

- _hyp3ri0n

ToS Enforcement

The information on this website is intended only for research purposes. We search common database leak sites to ensure this is not being circulated for malicious use. We do have default logging turned on for this website which likely includes IP addresses and other identifiers. Please don't misuse this information as we will cooperate with law enforcement if it is.

By the way, for old users, by popular request there is no longer a cryptominer on this website.

- _hyp3ri0n

Donations

Donations for scylla.sh are currently on hold! If you want to help please donate to my father's kickstarter project as described above.

Issues and Bugs

Scylla is currently in beta-v0.1. There will be bugs, Please report bugs to the scylla open github repo. Here you will also find the scylla code, please feel free to open feature requests here as well. These let me know what the community wants out of this site and is supremely useful to me.