Home Help Me Help You Want your own scylla?
Follow @_hyp3ri0n

0-day Hunting

Though this project is personally mine (_hyp3ri0n) I have a super exciting project I wanted to point people to from my company Hyperion Gray. Please note it is non-free (not trying to bait and switch you). If you use this project you're likely interested in this :). Information can be found here

Want to help?

Hey folks! Thanks for using scylla.sh and welcome! This is and always will be free. Direct donations to scylla.sh are on hold, If you want to help me out personally because you use or like this project, my father has a side project for an app-based automated drip irrigation system for growing plants in your house (hint: it works well for weeds of a certain nature in legal states). Instead of support to scylla check out and donate to his Kickstarter if it looks interesting to you. Every tiny bit helps! Thanks everyone!

Why Scylla?

scylla.sh has two major goals. One is to have a community-oriented database leak community and make a useful tool for security researchers

The other major goal is to undercut those people that are selling databases. If we can provide a free product here, we are eating into the bottom-line of those people selling leaked dbs for thousands of dollars. This de-incentivises buying of those DBs and therefore posting them in the first place. Even places that are supposedly "ethical" (looking at you HIBP) still have no problem selling your data. scylla.sh is and *will always* be free with an open API.

*Search is in beta, please report bugs to the scylla github repo

ipuserpasshashdomainnameemailpassword
nullnullnullCollectionsnullkristinetran2430@yahoo.comtrucvi
nullnull31f9bdffe398e0bfd9d1c65085a676f601cbbe43linkedin.comnull141140487null
nullnullnulllinkedin.comnull66845131xxx
nullmarion.buck@yahoo.de96a36e2b3e7819bc832e9968e7f8920ebadoo.comnullnullnull
nullnull819334e5b83919671271340b30d1cc1c49b204a3dropbox.comnullzozka@hotmail.comnull
nullnullnullCollectionsnullwww.meng412521012@foxmail.comdsa.12322
nullniknak_nik@hotmail.co.uk6da75054e1cb97089ab1c7a82ea3989bbadoo.comnullnullnull
nullnullnullCollectionsnullpashmon@mail.ruveronika
nullnull0e5d3e99a410adb305b107fb1baf6cdc3e6eb76elinkedin.comnull140652715null
nullnull1990f32b6f38ff7adc5ca865deecc7f27e47b31dlinkedin.comnullruth@artheventos.comnull
nullnullnulllinkedin.comnull131764001xxx
nullnullnullCollectionsnullkillerkekss@web.dewuffi12345
nullnull8a3c5e40f4dd4f7db1763a35b30d674461e6d67alinkedin.comnull137952623null
nullnullnulllinkedin.comnull21231510xxx
nullmariline.ourliac@free.frb65cfcf10237698ebbeac46d97cfea91badoo.comnullnullnull
nullnull4e0f564585435fc559d68d175e1bc75f56e8880alinkedin.comnull80576463null
nullalex.andra62@hotmail.frb05115c4220a88c6dde69a80ad7d56a1badoo.comnullnullnull
110.37.54.112nullnull000webhost.comMUHAMMAD AFTABmuhammadaftab001@gmail.comraza12345
nullnullnulllinkedin.comnull117181742xxx
nullstalin.vargas@hotmail.com72a86026abb289634ec64d7f3b544f0cbadoo.comnullnullnull
nullnull1dd38fe67a5f1aa70252db6c4efa2dc34ef89377linkedin.comnullclarissa512@yahoo.comnull
nullnullnulllinkedin.comnull83819011xxx
92.100.224.24nullnull000webhost.comAndreywww.mause89@mail.ru198978solange
nullnulld6c5b06c15b5a1e2b98a270d8647ce4c20f1d235linkedin.comnull152532704null
nulljipe.cavalier@hotmail.fr6b712cb069f13e333a2ff89459f11e48badoo.comnullnullnull
nulllinhe815@hotmail.com662aa3a5a06fd3507b8b11032598ddd2badoo.comnullnullnull
nullnull9a2746e307cd2438baea52e29e3ecf6f010009a6linkedin.comnull11592189null
nullnullnullCollectionsnulllazari.constantin@mail.rukiller888
nullnullnullCollectionsnullzimfirafoxi@mail.ruLtybcrf
nullnull17bcddbd4d89cee573b5157af75848b5e99766felinkedin.comnull148338015null
nullnulled4cdab4ea31149cc17027660cbc703dc9d3b6c8linkedin.comnull90612729null
94.227.110.99nullnull000webhost.comMinayassy2020@hotmail.comlocoinoe22
nullnullb2852dacbb9170d57250370b0263bebf41d9fa70linkedin.comnull78061657null
nullnullnullCollectionsnullsolok@comcast.netsexybeast
nullnullnullCollectionsnullzubluc@gmail.comaazaaz
nullriston.oma@gmail.comf308dc0bf10b755c305fdcfd3fd4627fbadoo.comnullnullnull
nullnull9447e7380ead1eb30c5ec89e85591a626a0dca21linkedin.comnullama15614@yahoo.comnull
nullnullnullCollectionsnullxthyztd2011@mail.ruCfif2011
nullmichel_el_amo@hotmail.comefb074b874cdf4fb8cb449354b7bcb4ebadoo.comnullnullnull
nully.helm@gmx.de33f84a618f8fcbdb364a5a629acc284cbadoo.comnullnullnull
125.163.18.141nullnull000webhost.comFerry Chrisnandikaferry@amp-indonesia.commatahari89
nullnulle4a238b6a192bba405af99013c09cf6b42cb59delinkedin.comnullazizah_abd@yahoo.comnull
nullnullnullCollectionsnullwangzheng01@ehuatai.com777777
nullnull7c4a8d09ca3762af61e59520943dc26494f8941blinkedin.comnullmuldowney.paul@gmail.comnull
nullnull13616bb8ccee1112724d058684ffb5514c8d675blinkedin.comnull142956569null
nullnullnullCollectionsnullhollo@bonzanas.comminecraft
nullmturska1@wp.pl38ccf9b8c78a67a56bda7f44966da7a4badoo.comnullnullnull
nullnull7368d7d6cf8410e1dc2a7bc9e09c2dc3456e048ddropbox.comnullchels.0509@gmail.comnull
nullnullnulllinkedin.comnull97632191xxx
nullnullnullCollectionsnullgrasso_nicholas@yahoo.comnaruto66
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99



Queries

Queries use Lucene query syntax. Please note that queries have changed, you no longer need to capitalize the first letter of each field, scylla will rectify automatially if you do use the capital letter. You will get a 500 error if your query is incorrect. Use the fields listed above to guide you. Full query syntax (including wildcards) are supported

Example search for passwords that start with ff
    
      password:ff*
    
  
This would match any passwords with a d in them and the username dave, dale, dane, etc.
    
      name:da?e password:*d*
    
  

API

The search API can be accessed by sending a GET request to this page with the Accept header set to Accept: application/json

GET https://scylla.sh/search?q=your_query&num=100&from=200

The above GET request grabs 1000 results of your_query starting at the 200th record. Pagination can be done using the "from" parameter. Queries return the first 10,000 hits.

Data is returned in JSON format like the following:

[
   {
      "_id":"hKW8WWsBBGJneKoTbFS-",
      "_index":"pw_data",
      "_score":19.8656,
      "_source":{
         "Domain":"exploit.in",
         "Email":"marin.vardic@zzf.hr",
         "Password":"freeshit"
      },
      "_type":"_doc"
   },
   {
      "_id":"_3PgVGsBBGJneKoTof0e",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"linkedin.com",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "PassHash":"a3f5b3b7c790e397b2d77eca31cd96bcd57c8700"
      },
      "_type":"_doc"
   },
   {
      "_id":"dBmbWmsBBGJneKoTZ5Wk",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"exploit.in",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "Password":"vili2005"
      },
      "_type":"_doc"
   }
]



Note you may use the fields below to guide you, but not all fields are returned with each query, only available fields. If fields are added, they will be appended to the list of available fields for query.

ToS

The information on this website is intended only for research purposes. Access has been given to security or other researchers for the purposes of research ONLY. Other than that I sincerely hope this data helps you with your projects and aids in your understanding of your or your organization's security posture. Much love.

- _hyp3ri0n

ToS Enforcement

The information on this website is intended only for research purposes. We search common database leak sites to ensure this is not being circulated for malicious use. We do have default logging turned on for this website which likely includes IP addresses and other identifiers. Please don't misuse this information as we will cooperate with law enforcement if it is.

By the way, for old users, by popular request there is no longer a cryptominer on this website.

- _hyp3ri0n

Donations

Donations for scylla.sh are currently on hold! If you want to help please donate to my father's kickstarter project as described above.

Issues and Bugs

Scylla is currently in beta-v0.1. There will be bugs, Please report bugs to the scylla open github repo. Here you will also find the scylla code, please feel free to open feature requests here as well. These let me know what the community wants out of this site and is supremely useful to me.