Home Help Me Help You Want your own scylla?
Follow @_hyp3ri0n

0-day Hunting

Though this project is personally mine (_hyp3ri0n) I have a super exciting project I wanted to point people to from my company Hyperion Gray. Please note it is non-free (not trying to bait and switch you). If you use this project you're likely interested in this :). Information can be found here

Want to help?

Hey folks! Thanks for using scylla.sh and welcome! This is and always will be free. Direct donations to scylla.sh are on hold, If you want to help me out personally because you use or like this project, my father has a side project for an app-based automated drip irrigation system for growing plants in your house (hint: it works well for weeds of a certain nature in legal states). Instead of support to scylla check out and donate to his Kickstarter if it looks interesting to you. Every tiny bit helps! Thanks everyone!

Why Scylla?

scylla.sh has two major goals. One is to have a community-oriented database leak community and make a useful tool for security researchers

The other major goal is to undercut those people that are selling databases. If we can provide a free product here, we are eating into the bottom-line of those people selling leaked dbs for thousands of dollars. This de-incentivises buying of those DBs and therefore posting them in the first place. Even places that are supposedly "ethical" (looking at you HIBP) still have no problem selling your data. scylla.sh is and *will always* be free with an open API.

*Search is in beta, please report bugs to the scylla github repo

ipusernameuserpasssaltpasshashdomainnameemailpassword
nullnullnullnullnullCollectionsnull1019336607@qq.com2905082
nullnullnullnullnulllinkedin.comnullreply1975@yahoo.comxxx
nullnullradoslawsergot@gmail.comnull3828e9e632310c3f2cd0c487541b3824badoo.comnullnullnull
nullnulloliver_clar@hotmail.comnullbb77f2e45050dc5e53cbb1832e777b8bbadoo.comnullnullnull
nullnullnullnull894b2427a18764890dfc181ef9b20ca04fa8213elinkedin.comnull114384505null
nullnullnullnullnull7k7k.comnullclianyx123456
nullnullnullnullnullCollectionsnullryousuke727@hotmail.commakunouti
nullnulltief_prence@hotmail.comnull7d82fe7a3ba09eb153be42045ca6065fbadoo.comnullnullnull
nullnullgabi1407@op.plnull21fea0d4fcb49d54fd27db9a3717b2c0badoo.comnullnullnull
nullnulldavidcimadevilla@hotmail.esnull500f3d429d09fb7449825827a4dad0f0badoo.comnullnullnull
nullnullnullnull94cea9b93394c478b94fa7fd0840194259fb0e12linkedin.comnullbrianleshe@yahoo.comnull
78.137.8.87nullnullnullnull000webhost.comOlegmoonnight_2008@ukr.netknight_rider
nullnullnullnullnull7k7k.comnull593303259@qq.com12345dong
nullnullnullnull$2a$08$.SAF0yKHy1PyaMs3etldjeisap2so2ugtlZJ2Ur5vQ29vPh83TiBudropbox.comnulljanicki.robin93@gmail.comnull
nullnullnullnull10009a8dc29bcba8a7b03a17016f92b81b4dd880linkedin.comnull114290175null
nullnullnullnullnulllinkedin.comnulltyler.sims@keystonefoods.comxxx
78.80.161.168MaterazzinullFD`WcS:@0I$^:W*HkX:sOi}D'MXGSBc17e31bcecc9976bd19e7e3fd6fce361WiiUISO.comnullhonzapasztor@seznam.cznull
nullnullnullnullnull7k7k.comnull依稀别梦寒19642021012
nullnullnullnullbdcada496675252571e9701a299941669a62edb5linkedin.comnull18054314null
nullnullputo_maik_loco@hotmail.comnull594454e34ff85a1ceff24f5fb925b745badoo.comnullnullnull
nullnullnullnull7a625b571469d644a7e08862ed29c1e8ee717795linkedin.comnull7963185null
nullnullnullnullnulllinkedin.comnull123557741xxx
nullnullnullnull7a55a324471de8e41712589ef5b8dd033ee0865elinkedin.comnull156334566null
nullnullnullnullnullCollectionsnullblacktorm82@hotmail.com1364921844v
nullnullnullnull$2a$08$fhuQajAYV.VKtn27g1pEgOnnEgJa35/Ga2fRF87u2McmAo1cXIkcOdropbox.comnullkimbode@live.senull
nullnullnullnull8f9196e6fc16570ade4a0404834f0bda4d8bcabflinkedin.comnull158237267null
nullnullnullnullnulllinkedin.comnullKeeked212@aol.comxxx
nullnullfanf@fanf.orgnull282737566cdf3f7b5ad766135823ba61badoo.comnullnullnull
nullnullnullnull$2a$08$zxYvOQD04oTpRnSHZ7x.veRj4pjRjImcF1yAePq.OVirMu5O5MIsydropbox.comnullacwhite.au@gmail.comnull
nullnullnullnullnullCollectionsnullhuskie0324@yahoo.combbyboo1
nullnullnullnullc7100a5ab6f4bc96b35c7d1d6a04fcbc77e1423dlinkedin.comnull93402896null
nullnullnullnullnulllinkedin.comnull22581801 xxx -> Jaime.Sanchez@volstate.edu
nullnullnullnullnullCollectionsnullby_FM@qip.ruparapafm
nullnullnullnull2e22b830c19c7f63ebe2cf02d8a768a969528d0dlinkedin.comnull118491805null
nullnullnullnullnulllinkedin.comnullguoguol@andrew.cmu.eduxxx
nullnullnullnull46bf180949c089c55f150f92613375c3530e162clinkedin.comnullsterli60@mail.runull
nullnullnullnullnulllinkedin.comnull73093112xxx
nullnullnullnulla77a14316d3c603acd98ec0b5a8c04a40208a9c5linkedin.comnulljoanna_yuridia@hotmail.comnull
nullnullnullnull9902b9423f357068af5d8112d6f162091122facclinkedin.comnull4203816null
nullnullnullnull7995482902a4afb895e31af8e139c53b64ed78c3linkedin.comnullbiplobdh@yahoo.comnull
nullnullnullnull3e48edfca391b490bd395b6814bcf82dbbe669a6dropbox.comnulltytntoo@googlemail.comnull
nullnullvolkova.hana@email.cznullc2d48883e1b00fdced86a06e121fd136badoo.comnullnullnull
nullnullnullnullnulllinkedin.comnullajfv@biaoverseas.comxxx
nullnullwalid666@hotmail.itnull8c03a07353a9f0821c255fc7981043d5badoo.comnullnullnull
nullnullnullnull2ffeb8956ee224516eb660538e9292ddb6b3c924linkedin.comnull25627674null
nullnullnullnull$2a$08$DoaVJ9ZC.r7eWM4kdM/.7.JIuKKNKRBSqDlvTwKY9LQlQ33tMHhhKdropbox.comnulld.buckshnis@comcast.netnull
nullnullnullnullb4a8b4116820291b9702cb85ea60e6d56d2f24c3linkedin.comnullangeloliveira76@bol.com.brnull
nullnullnullnullnullCollectionsnullf1eganova211175@mail.ruOfAgAjoBEXo454
95.56.38.241nullnullnullnull000webhost.comScriven Grotbergdelmraepduzz4@msn.comvolac567
nullnullnullnullnulllinkedin.comnulljohnd@surfnetusa.comxxx
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99



Queries

Queries use Lucene query syntax. Please note that queries have changed, you no longer need to capitalize the first letter of each field, scylla will rectify automatially if you do use the capital letter. You will get a 500 error if your query is incorrect. Use the fields listed above to guide you. Full query syntax (including wildcards) are supported

Example search for passwords that start with ff
    
      password:ff*
    
  
This would match any passwords with a d in them and the username dave, dale, dane, etc.
    
      name:da?e password:*d*
    
  

API

The search API can be accessed by sending a GET request to this page with the Accept header set to Accept: application/json

GET https://scylla.sh/search?q=your_query&num=100&from=200

The above GET request grabs 1000 results of your_query starting at the 200th record. Pagination can be done using the "from" parameter. Queries return the first 10,000 hits.

Data is returned in JSON format like the following:

[
   {
      "_id":"hKW8WWsBBGJneKoTbFS-",
      "_index":"pw_data",
      "_score":19.8656,
      "_source":{
         "Domain":"exploit.in",
         "Email":"marin.vardic@zzf.hr",
         "Password":"freeshit"
      },
      "_type":"_doc"
   },
   {
      "_id":"_3PgVGsBBGJneKoTof0e",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"linkedin.com",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "PassHash":"a3f5b3b7c790e397b2d77eca31cd96bcd57c8700"
      },
      "_type":"_doc"
   },
   {
      "_id":"dBmbWmsBBGJneKoTZ5Wk",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"exploit.in",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "Password":"vili2005"
      },
      "_type":"_doc"
   }
]



Note you may use the fields below to guide you, but not all fields are returned with each query, only available fields. If fields are added, they will be appended to the list of available fields for query.

ToS

The information on this website is intended only for research purposes. Access has been given to security or other researchers for the purposes of research ONLY. Other than that I sincerely hope this data helps you with your projects and aids in your understanding of your or your organization's security posture. Much love.

- _hyp3ri0n

ToS Enforcement

The information on this website is intended only for research purposes. We search common database leak sites to ensure this is not being circulated for malicious use. We do have default logging turned on for this website which likely includes IP addresses and other identifiers. Please don't misuse this information as we will cooperate with law enforcement if it is.

By the way, for old users, by popular request there is no longer a cryptominer on this website.

- _hyp3ri0n

Donations

Donations for scylla.sh are currently on hold! If you want to help please donate to my father's kickstarter project as described above.

Issues and Bugs

Scylla is currently in beta-v0.1. There will be bugs, Please report bugs to the scylla open github repo. Here you will also find the scylla code, please feel free to open feature requests here as well. These let me know what the community wants out of this site and is supremely useful to me.