Home Help Me Help You Want your own scylla?
Follow @_hyp3ri0n

0-day Hunting

Though this project is personally mine (_hyp3ri0n) I have a super exciting project I wanted to point people to from my company Hyperion Gray. Please note it is non-free (not trying to bait and switch you). If you use this project you're likely interested in this :). Information can be found here

Want to help?

Hey folks! Thanks for using scylla.sh and welcome! This is and always will be free. Direct donations to scylla.sh are on hold, If you want to help me out personally because you use or like this project, my father has a side project for an app-based automated drip irrigation system for growing plants in your house (hint: it works well for weeds of a certain nature in legal states). Instead of support to scylla check out and donate to his Kickstarter if it looks interesting to you. Every tiny bit helps! Thanks everyone!

Why Scylla?

scylla.sh has two major goals. One is to have a community-oriented database leak community and make a useful tool for security researchers

The other major goal is to undercut those people that are selling databases. If we can provide a free product here, we are eating into the bottom-line of those people selling leaked dbs for thousands of dollars. This de-incentivises buying of those DBs and therefore posting them in the first place. Even places that are supposedly "ethical" (looking at you HIBP) still have no problem selling your data. scylla.sh is and *will always* be free with an open API.

*Search is in beta, please report bugs to the scylla github repo

ipuserpasssaltpasshashdomainnameemailpassword
nullnullnullnulllinkedin.comnullwcopp1@comcast.netxxx
nullnullnullnullCollectionsnullmarialuciac@live.comYaaasGaga
118.108.191.178nullnullnull000webhost.comManusbtwtippopvltoe@narod.ruiXN2FF069439
nullnullnullnullCollectionsnullgolov.sasha2012@yandex.ru01011999sasha
nullnullnull0391e0409629702618e8b5a73185c6f58bc6a02blinkedin.comnullkilgore209@piggysurf.comnull
nullnullnull6715327e9bebb0fedf12bf3067b093e1afd4d986linkedin.comnull13102709null
nullnullnullnullCollectionsnullrobinbaek123@gmail.comhosebaek123@gmail.com
nullnullnull$2a$08$TBV.moutc8uAPn69qXsLL.m6oEoEnGKvaFcbQmMCoDNS1MUN4Ppd2dropbox.comnullnonoxenia447@gmx.denull
nullnullnullaf671a8f3f413972bbded613ba56eeec9d95c33clinkedin.comnull104070946null
nullnullnull$2a$08$t8goPskF0C3x0guexqhFfetf/pvPC92MF6zLb0qiRg65rj/fHCDpudropbox.comnullaminadarby@doraldesigns.comnull
nullphilmoblo@hotmail.comnull9334fc50c27014684b477bfd8d2584bfbadoo.comnullnullnull
nullnullnulle165f7b413e6c9222b7ea3a4035c87b87aaa30ccdropbox.comnullkayleem97@live.comnull
199.47.195.131rotatesmile57aa8fac608775b7e25f14e3f10e1662fa1e3abandonia.comnullCelewestinaBturetant@outlook.comnull
nullnullnullbf1a61d22a3911260b3fd2ca05d8dc71e5a0310alinkedin.comnull27799086null
nullnullnull60e5a72c20e789d06224d53a644a8f6f8513132cdropbox.comnullkatya.nastasya@mailinator.comnull
nullnullnullnulllinkedin.comnull107708031xxx
nullnullnullf61bcc7252fc43c8c6a1b79d39f3c7328bbbfde4linkedin.comnull25478169null
nullgorvat-ivan@mail.runull03703ce41f2a3aca5c347708e1803971badoo.comnullnullnull
nullnullnullnullCollectionsnullsveto4ka.sveta@yandex.ruEPAHAT
nullnullnull7e6b48a237b80c63f3b80af1cf569a2f0f907e41linkedin.comnulldianagomez64@gmail.comnull
nullnullnullf38e6fdec69581b9deb386319b91e3f3b6b69072linkedin.comnullipek.kirmizidere@ug.ozyegin.edu.trnull
nullnullnullnulllinkedin.comnull159559291xxx
nullnullnullnullCollectionsnulldadadada@da.com123456789
nullnullnull7541e4a8fa7a53898dab99d4125db4adef095535linkedin.comnull13463083null
nullnullnullbe2abaf79e919eb7ec8bb00efc39047c7c02b47cdropbox.comnullinfo@sonnylillevang.dknull
nullnullnull$2a$08$mGK6W.ywq6PkLWQF5obWFu6TkOCIISmFrEncczAwQMQhMqL9mrjjedropbox.comnullgytolento@yahoo.comnull
nullnullnullnulllinkedin.comnull59919010xxx
nullqupidscorpio@yahoo.comnullb0414b00e5050fea551f82a94accca82badoo.comnullnullnull
nullnullnull0d057e0754691cfc94cbae46f4cdd87f10b00695dropbox.comnullsswarm@gmail.comnull
nullbenjibooji@live.co.uknulld556235d7703b9851b2a7eac64767d7fbadoo.comnullnullnull
nullnullnull51cca03064febff4e47783578159a7440a729ac2linkedin.comnull143942879null
nullnullnull0ac85be0fe1de7d58e54d8287ebb7ac3ce3628b7linkedin.comnull97989193null
nullnullnull$2a$08$IaLaY2yB3nNeru9h0LjdXulbBvSp1HUi7d6hVz8JXVX3C23/n6bvydropbox.comnullhanbokin.rep@gmail.comnull
nullnullnull$2a$08$ZHAkHLZM5NwhLb56c7Sf4eJ1SsRycB2kHwM/W/kPD3sHe0ERbc6.Wdropbox.comnullrociomiron@gmail.comnull
nullkarmellosbet@gmail.comnull4c87dbea7406252697e6b5bed0cb5731badoo.comnullnullnull
nullnullnullf7b115c2504d057cf61acedf46f263560821df23dropbox.comnullwangjing038@gmail.comnull
nullnullnullnulllinkedin.comnull158044600xxx
nullnullnullnullCollectionsnullUchihamaniac@yahoo.deQw221133
nullnullnullfe3c426e960ddf2bd73e2b777eec2123fdbd0cbadropbox.comnullgcalinm@yahoo.comnull
nullnullnull161c88ba9b15fb598ec7e7b715232a11fd565c8dlinkedin.comnull42487309null
nullnullnullnullCollectionsnullmononake@gmx.deZ3aNO98N
nullnullnullnullCollectionsnullgladius51evo@hotmail.comjaja1212
nullnullnull97fb687098d33440f70c1423a1cba922fb7bb521dropbox.comnullkkyr@enet.grnull
nullnullnullnullCollectionsnull2125913@mail.ru4v5b6n7m
nullnullnull$2a$08$9qMSP0ttKrYfwiy3kK1Tz.2sxob5zpDzg3vi4kwY/zYNTVuOqIelCdropbox.comnullmaulinpandya2006@rediffmail.comnull
nullnullnullnulllinkedin.comnull80845340xxx
nullnullnull585fa67228310473fed6a9daf30c52ac8c76d683linkedin.comnullrichard_1983_4_vn@hotmail.comnull
nullsohrab_voetbal@hotmail.comnull2f8a52a46624a7b3507af16196ebd5e9badoo.comnullnullnull
nullnullnull$2a$08$14WDKL5t/oWSNKZ56YAtSOuGdMhLc9hTASCviHFCLe64Q2gWMqRxKdropbox.comnullbrilleslange@gmail.comnull
nullnullnull$2a$08$gmdkWFJl/4gOhwqZF8yyuOwfRFVZETJfYVH3yrfMJzyB7ZE01sYTSdropbox.comnullnickoelr@hotmail.comnull
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99



Queries

Queries use Lucene query syntax. Please note that queries have changed, you no longer need to capitalize the first letter of each field, scylla will rectify automatially if you do use the capital letter. You will get a 500 error if your query is incorrect. Use the fields listed above to guide you. Full query syntax (including wildcards) are supported

Example search for passwords that start with ff
    
      password:ff*
    
  
This would match any passwords with a d in them and the username dave, dale, dane, etc.
    
      name:da?e password:*d*
    
  

API

The search API can be accessed by sending a GET request to this page with the Accept header set to Accept: application/json

GET https://scylla.sh/search?q=your_query&num=100&from=200

The above GET request grabs 1000 results of your_query starting at the 200th record. Pagination can be done using the "from" parameter. Queries return the first 10,000 hits.

Data is returned in JSON format like the following:

[
   {
      "_id":"hKW8WWsBBGJneKoTbFS-",
      "_index":"pw_data",
      "_score":19.8656,
      "_source":{
         "Domain":"exploit.in",
         "Email":"marin.vardic@zzf.hr",
         "Password":"freeshit"
      },
      "_type":"_doc"
   },
   {
      "_id":"_3PgVGsBBGJneKoTof0e",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"linkedin.com",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "PassHash":"a3f5b3b7c790e397b2d77eca31cd96bcd57c8700"
      },
      "_type":"_doc"
   },
   {
      "_id":"dBmbWmsBBGJneKoTZ5Wk",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"exploit.in",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "Password":"vili2005"
      },
      "_type":"_doc"
   }
]



Note you may use the fields below to guide you, but not all fields are returned with each query, only available fields. If fields are added, they will be appended to the list of available fields for query.

ToS

The information on this website is intended only for research purposes. Access has been given to security or other researchers for the purposes of research ONLY. Other than that I sincerely hope this data helps you with your projects and aids in your understanding of your or your organization's security posture. Much love.

- _hyp3ri0n

ToS Enforcement

The information on this website is intended only for research purposes. We search common database leak sites to ensure this is not being circulated for malicious use. We do have default logging turned on for this website which likely includes IP addresses and other identifiers. Please don't misuse this information as we will cooperate with law enforcement if it is.

By the way, for old users, by popular request there is no longer a cryptominer on this website.

- _hyp3ri0n

Donations

Donations for scylla.sh are currently on hold! If you want to help please donate to my father's kickstarter project as described above.

Issues and Bugs

Scylla is currently in beta-v0.1. There will be bugs, Please report bugs to the scylla open github repo. Here you will also find the scylla code, please feel free to open feature requests here as well. These let me know what the community wants out of this site and is supremely useful to me.