Home Help Me Help You Want your own scylla?
Follow @_hyp3ri0n

0-day Hunting

Though this project is personally mine (_hyp3ri0n) I have a super exciting project I wanted to point people to from my company Hyperion Gray. Please note it is non-free (not trying to bait and switch you). If you use this project you're likely interested in this :). Information can be found here

Want to help?

Hey folks! Thanks for using scylla.sh and welcome! This is and always will be free. Direct donations to scylla.sh are on hold, If you want to help me out personally because you use or like this project, my father has a side project for an app-based automated drip irrigation system for growing plants in your house (hint: it works well for weeds of a certain nature in legal states). Instead of support to scylla check out and donate to his Kickstarter if it looks interesting to you. Every tiny bit helps! Thanks everyone!

Why Scylla?

scylla.sh has two major goals. One is to have a community-oriented database leak community and make a useful tool for security researchers

The other major goal is to undercut those people that are selling databases. If we can provide a free product here, we are eating into the bottom-line of those people selling leaked dbs for thousands of dollars. This de-incentivises buying of those DBs and therefore posting them in the first place. Even places that are supposedly "ethical" (looking at you HIBP) still have no problem selling your data. scylla.sh is and *will always* be free with an open API.

*Search is in beta, please report bugs to the scylla github repo

userpasshashdomainemailpassword
nullbb5bccfd29d909413fbe2f63c42dff7b39ea15fdlinkedin.combirungi.geraldine@yahoo.comnull
null0c46c486d8789499da4dc024c23b1c16bcde014blinkedin.comrrhhinfinit@infinit.lanull
www.cisilya31@yahoo.fr25f9e794323b453885f5181f1b624d0bbadoo.comnullnull
null$2a$08$p/Kys9rjoRGc4cUjoka/p.WWKA0mwJZDuGTKz.izv41qRow.000j2dropbox.comrichardg@sonic.netnull
nullnullCollectionssakkos18@yahoo.gr159357
nullnulllinkedin.comrlin@vip.163.comxxx
xjankax12@azet.sk93279e3308bdbbeed946fc965017f67abadoo.comnullnull
null33d488a073ada8b5234cdf333e775f1682d3e9aelinkedin.com100729938null
null664ef160617a7f015a3d5f781a3e1c51ab01fd5dlinkedin.comeason1103@hotmail.comnull
nulla13abcc960da9003ffb72cc9cca2a75d1fd7f1c3dropbox.comincredibleegypt99@yahoo.comnull
kamilrenosik88@wp.pl533087e4c136cc48d7e26c3c626cb492badoo.comnullnull
nullnullCollectionsasdr123@live.comasd123
null0785026e650f4bf9d32d787bb3226478fda7ed23linkedin.com129650626null
null$2a$08$9EWpJKnzwxWCVGzTmtfXVeVXLZ/NLFQZy1GMcrzOc2NKXbEHz0/W6dropbox.comjessica.schukraft@gmail.comnull
nulld0893868bc37abecaa2e123d08463966ed4c7dcflinkedin.com48052435null
nullnullCollectionss_koumni@yahoo.frrisiqaby
nullnullCollectionshcarterjd@yahoo.comTaylor22
null1b11b1c151f08ccd0d0c59de7d1a01b9772d73a5linkedin.com85890474null
null0e0e7473f4ae00f6ae12d98c1b9cb694dee5546elinkedin.com167197318null
nullnulllinkedin.comsarojbhjana24@yahoo.co.inxxx
null82ef0fe0cb5c4bdb81172654a7eda0ce8f3693f0dropbox.comb.s.p@list.runull
nullnulllinkedin.com150901922xxx
null$2a$08$boYqBaqy7GL9E6ZypqQL0eS2OUO6w/99lrK204j1RgSRVTTm2VcC6dropbox.comluckthebeast@hotmail.comnull
kichererbse17@gmx.de0ee79fd85f249264cf66773b5b3b4950badoo.comnullnull
null518c2bf380e26b3e8b33545c09bd6770a8c1427alinkedin.com137911333null
nullnull7k7k.com?????? NBvCA32fa9
m.donkers14@chello.nl2576dbb53e9593f6b9b267d3869e97b9badoo.comnullnull
nullnulllinkedin.com37116936 b45e16e9fd7bef6ba7aa40be4f7c11cb837a315e -> ajayyadav786@gmail.com
nullnulllinkedin.com39083221xxx
null020ccbb7ce7de673c7121b3339d53c73dd28bc16linkedin.com35761496null
nullnullCollectionsmanyakov.zhora@mail.ruujifrhen
nullnullCollectionsmannock91@hotmail.dehallo
nullnulllinkedin.com42193270xxx
null95822b98ed8f51eeab6b0a38c9f0912d02743c29linkedin.comjohnline60@hotmail.comnull
nullnull7k7k.com44052154405215
nullnullCollectionsryanvanderput@comcast.netawdsawds!
nullnullCollectionssixx_mickey@yahoo.comemo4life
nullnullCollectionsSr-Sosad181@hotmail.com123456
nullnulllinkedin.com71891704 9bd2ad0e2c61cd81fa8f7a237bab3cacebf8675f -> seandeane65@googlemail.com
nullnulllinkedin.com33389239 93092ec73b843bcb0a0b147728387a6868042635 -> almassanori@hotmail.com
dalidapalace@hotmail.com48e21be038f048a3a6fb6f72d1a1ac8ebadoo.comnullnull
null874f5e379b379e5ba65fcb7a1ccbfe0e0bf995dalinkedin.com38266029null
nullnullCollectionsjanmoore453@yahoo.comloveyou
nullnullCollectionsdangilgen@yahoo.comlorlingilgen
null13b0fa50ba3e86057e91db041f4bd497fefa13d8linkedin.comrockmanpharmaceuticals@yahoo.comnull
nullnulllinkedin.com43041512xxx
null3555b53874e5d34b729b7eca6fbf56fe36847ec9linkedin.comstefan@clumsy.chnull
nulla2af085a8358cea43355bd1e1073dba2e2ba98c4linkedin.comtsenvc@teckguan.comnull
thxfilm@jumpy.it08642c6cfdefc6d2d3258f5d4ba48eafbadoo.comnullnull
null$2a$08$J/NrIJFOh0LtItXPOHgcRuQLA6XkOrMuDDVgZ6ILOuyBKU36MWryqdropbox.comvarun2905@yahoo.comnull
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99



Queries

Queries use Lucene query syntax. Please note that queries have changed, you no longer need to capitalize the first letter of each field, scylla will rectify automatially if you do use the capital letter. You will get a 500 error if your query is incorrect. Use the fields listed above to guide you. Full query syntax (including wildcards) are supported

Example search for passwords that start with ff
    
      password:ff*
    
  
This would match any passwords with a d in them and the username dave, dale, dane, etc.
    
      name:da?e password:*d*
    
  

API

The search API can be accessed by sending a GET request to this page with the Accept header set to Accept: application/json

GET https://scylla.sh/search?q=your_query&num=100&from=200

The above GET request grabs 1000 results of your_query starting at the 200th record. Pagination can be done using the "from" parameter. Queries return the first 10,000 hits.

Data is returned in JSON format like the following:

[
   {
      "_id":"hKW8WWsBBGJneKoTbFS-",
      "_index":"pw_data",
      "_score":19.8656,
      "_source":{
         "Domain":"exploit.in",
         "Email":"marin.vardic@zzf.hr",
         "Password":"freeshit"
      },
      "_type":"_doc"
   },
   {
      "_id":"_3PgVGsBBGJneKoTof0e",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"linkedin.com",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "PassHash":"a3f5b3b7c790e397b2d77eca31cd96bcd57c8700"
      },
      "_type":"_doc"
   },
   {
      "_id":"dBmbWmsBBGJneKoTZ5Wk",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"exploit.in",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "Password":"vili2005"
      },
      "_type":"_doc"
   }
]



Note you may use the fields below to guide you, but not all fields are returned with each query, only available fields. If fields are added, they will be appended to the list of available fields for query.

ToS

The information on this website is intended only for research purposes. Access has been given to security or other researchers for the purposes of research ONLY. Other than that I sincerely hope this data helps you with your projects and aids in your understanding of your or your organization's security posture. Much love.

- _hyp3ri0n

ToS Enforcement

The information on this website is intended only for research purposes. We search common database leak sites to ensure this is not being circulated for malicious use. We do have default logging turned on for this website which likely includes IP addresses and other identifiers. Please don't misuse this information as we will cooperate with law enforcement if it is.

By the way, for old users, by popular request there is no longer a cryptominer on this website.

- _hyp3ri0n

Donations

Donations for scylla.sh are currently on hold! If you want to help please donate to my father's kickstarter project as described above.

Issues and Bugs

Scylla is currently in beta-v0.1. There will be bugs, Please report bugs to the scylla open github repo. Here you will also find the scylla code, please feel free to open feature requests here as well. These let me know what the community wants out of this site and is supremely useful to me.