Home Help Me Help You Want your own scylla?
Follow @_hyp3ri0n

0-day Hunting

Though this project is personally mine (_hyp3ri0n) I have a super exciting project I wanted to point people to from my company Hyperion Gray. Please note it is non-free (not trying to bait and switch you). If you use this project you're likely interested in this :). Information can be found here

Want to help?

Hey folks! Thanks for using scylla.sh and welcome! This is and always will be free. Direct donations to scylla.sh are on hold, If you want to help me out personally because you use or like this project, my father has a side project for an app-based automated drip irrigation system for growing plants in your house (hint: it works well for weeds of a certain nature in legal states). Instead of support to scylla check out and donate to his Kickstarter if it looks interesting to you. Every tiny bit helps! Thanks everyone!

Why Scylla?

scylla.sh has two major goals. One is to have a community-oriented database leak community and make a useful tool for security researchers

The other major goal is to undercut those people that are selling databases. If we can provide a free product here, we are eating into the bottom-line of those people selling leaked dbs for thousands of dollars. This de-incentivises buying of those DBs and therefore posting them in the first place. Even places that are supposedly "ethical" (looking at you HIBP) still have no problem selling your data. scylla.sh is and *will always* be free with an open API.

*Search is in beta, please report bugs to the scylla github repo

ipusernameuserpasssaltpasshashdomainnameemailpassword
nullnullnullnull95f05c9e310ee1db186ca4a4508c4d2fe7669fb2linkedin.comnull124837028null
nullnullnullnullnulllinkedin.comnull101420490xxx
nullnullnullnullnulllinkedin.comnull151592231xxx
nullnullnullnull$2a$08$Rx/jspiQN6y7ZJvjnt.JAOKZCwnd1h3rCMIAKbSB.wxDaEZOULJ2ydropbox.comnullmichael.halbeisen@inode.atnull
nullnullnullnullnullCollectionsnullryanhunwick@hotmail.comdoggus2
195.230.140.90Noxisionnull]fx5b242db62b9e2eeccb761f7aa2f17e13nihonomaru.comnullNoxision@gmail.comnull
nullnullnullnull88a95dfc8af7fcd90a6d63e99dd32cc1410a924alinkedin.comnull89780963null
nullnullnullnullnulllinkedin.comnull7155721xxx
nullnullnullnullnull7k7k.comnull轻焉188834
nullnullnullnull6598afed0605de336ffffdb79f694463031d250flinkedin.comnullrsterling09@yahoo.comnull
nullnullnullnull77e28a2060065035a02a1285ca1290d213b5d7b3dropbox.comnullvclark178@hotmail.comnull
nullnullnullnullnulllinkedin.comnull6371060xxx
nullnullnullnullab46d71e6a70f03fec42b6bfb0bf0854f39011aclinkedin.comnullthesoundequilibrium@gmail.comnull
nullnullsimtemp92@hotmail.frnull5b3e1efbd5161459cda3e0a0b6ab8beebadoo.comnullnullnull
nullnullnullnulla37549493d1fe0b352205516d21cd79b4eac971clinkedin.comnulllannlandis@hotmail.comnull
nullnullnullnull478e2a950596f06324138a5926ec8ef1e30347addropbox.comnullis.ishiodori@hotmail.co.jpnull
nullnullnullnullnullCollectionsnullfsf.fs.09@mail.ru11223344
nullnullnullnull23536e1f94f1c8c7d6f112a73c1c134ea7efaeeelinkedin.comnull86368577null
nullnullnullnull$2a$08$iUD1wwdTb0ITzAqiRW2hWejlxc8KUht6yiNUxkan1e6kwhBSg6UYadropbox.comnulldorle.thiel@gmx.denull
94.27.84.48nullnullnullnull000webhost.comganjik2010.ganjik@gmail.com98248251521g
nullnullnullnull346432c0c842c069f79ced7009ec553db7672d0elinkedin.comnull40717614null
nullnullnullnullnullCollectionsnullimhere2cam@hotmail.comqwerty123456
nullnullnullnullnulllinkedin.comnull42818830xxx
nulljoonasjuutt1nullnullnullCollection1-grinderscape.orgnullnull:kaspar
nullnullwillo@casema.nlnull33eacad885136043bcf5f827ffd54e58badoo.comnullnullnull
nullnulltinbol@hotmail.comnullb7f6593421d9f21bdd5caef01b24f5c8badoo.comnullnullnull
nullnullnullnullnullCollectionsnull1320743863@qq.comlihan1989
nullnullnullnullnulllinkedin.comnull10583097 678f8e280b00cf92393404ecbb37115c9f8c6c29 -> Magnus.Eliasson@skandia.se
nullnullnullnull58f14a7cd43d9bebc938b5f0d05f430524419644dropbox.comnullrajeczkyzoltan@oncotherm.orgnull
nullnullnullnull9f83df8b846c7960098d9c3fb5498f301cc950a2linkedin.comnullrite2ayushgupta@gmail.comnull
nullnullnullnullnulllinkedin.comnull37910572xxx
nullnullnullnullnullCollectionsnullveselafil@yahoo.comivo123
nullnullnullnull2c2461ee53dae62650fedaeec4ea09ede94c4e3alinkedin.comnull142528853null
nullnullleticemara@gmail.comnulla3c7067f965c8a3da31972d1354fe67dbadoo.comnullnullnull
nullnullnullnulle6bd57199990eb6e6e69a6f73a63eb95cf4d8b6cdropbox.comnullzsuzsanna.ujhelyi@cemsmail.orgnull
nullnullnullnull96d53734fc1bd54d848cd30f98069b90333b1bb3linkedin.comnull49471564null
nullnullfatos1504@hotmail.denullbccaedb7cc560ecf70105fe0ac952bf7badoo.comnullnullnull
nullnullnullnullf1732c114fc016370cc73e94f000da18ae44f131linkedin.comnullsweet-ems@sympatico.canull
nullnullnullnullnulllinkedin.comnull151154942xxx
nullnullnullnullnulllinkedin.comnull83786992xxx
nullnullnullnull1e13c2fd843ceb0eb32b6d9b8cdd8d2396d07cf1linkedin.comnull27413638null
nullnullnullnull89c5dcca2e2f54cbf412e778e368fcdb56d7e5f6linkedin.comnull79078334null
24.1.253.102pirlo25nullnulledc1a7b98e497b9be2eaa72451252211bd70d9d13576cd34926599d47cec0b79e67c1a98b029c436d8f88ef1fd556e472b528e2a5a479fa3de22a2fd41aca138leet.ccnullnullnull
nullnullbruno1990-@hotmail.itnull0de8bbd4a97e8c5067d57fec5395bd7bbadoo.comnullnullnull
nullnullnullnullnullCollectionsnullsah6776@mail.ru20201166
nullnulldaniela.greb@gmx.denull0c0f66643fb416bed177c2c8a16386ccbadoo.comnullnullnull
nullnullnullnullnull7k7k.comnullapplejane12719831225
nullnullnullnullnulllinkedin.comnullliviatomia@ig.com.brxxx
nullnullnullnull4b6313ca91349a677be80944521cd5f5a7d7520alinkedin.comnulltommartinnorman@gmail.comnull
nullnulligorsiddi@hotmail.itnullc52d0ce067bd39c259f8eb5b4ce14601badoo.comnullnullnull
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99



Queries

Queries use Lucene query syntax. Please note that queries have changed, you no longer need to capitalize the first letter of each field, scylla will rectify automatially if you do use the capital letter. You will get a 500 error if your query is incorrect. Use the fields listed above to guide you. Full query syntax (including wildcards) are supported

Example search for passwords that start with ff
    
      password:ff*
    
  
This would match any passwords with a d in them and the username dave, dale, dane, etc.
    
      name:da?e password:*d*
    
  

API

The search API can be accessed by sending a GET request to this page with the Accept header set to Accept: application/json

GET https://scylla.sh/search?q=your_query&num=100&from=200

The above GET request grabs 1000 results of your_query starting at the 200th record. Pagination can be done using the "from" parameter. Queries return the first 10,000 hits.

Data is returned in JSON format like the following:

[
   {
      "_id":"hKW8WWsBBGJneKoTbFS-",
      "_index":"pw_data",
      "_score":19.8656,
      "_source":{
         "Domain":"exploit.in",
         "Email":"marin.vardic@zzf.hr",
         "Password":"freeshit"
      },
      "_type":"_doc"
   },
   {
      "_id":"_3PgVGsBBGJneKoTof0e",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"linkedin.com",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "PassHash":"a3f5b3b7c790e397b2d77eca31cd96bcd57c8700"
      },
      "_type":"_doc"
   },
   {
      "_id":"dBmbWmsBBGJneKoTZ5Wk",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"exploit.in",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "Password":"vili2005"
      },
      "_type":"_doc"
   }
]



Note you may use the fields below to guide you, but not all fields are returned with each query, only available fields. If fields are added, they will be appended to the list of available fields for query.

ToS

The information on this website is intended only for research purposes. Access has been given to security or other researchers for the purposes of research ONLY. Other than that I sincerely hope this data helps you with your projects and aids in your understanding of your or your organization's security posture. Much love.

- _hyp3ri0n

ToS Enforcement

The information on this website is intended only for research purposes. We search common database leak sites to ensure this is not being circulated for malicious use. We do have default logging turned on for this website which likely includes IP addresses and other identifiers. Please don't misuse this information as we will cooperate with law enforcement if it is.

By the way, for old users, by popular request there is no longer a cryptominer on this website.

- _hyp3ri0n

Donations

Donations for scylla.sh are currently on hold! If you want to help please donate to my father's kickstarter project as described above.

Issues and Bugs

Scylla is currently in beta-v0.1. There will be bugs, Please report bugs to the scylla open github repo. Here you will also find the scylla code, please feel free to open feature requests here as well. These let me know what the community wants out of this site and is supremely useful to me.