Home Help Me Help You Want your own scylla?
Follow @_hyp3ri0n

0-day Hunting

Though this project is personally mine (_hyp3ri0n) I have a super exciting project I wanted to point people to from my company Hyperion Gray. Please note it is non-free (not trying to bait and switch you). If you use this project you're likely interested in this :). Information can be found here

Want to help?

Hey folks! Thanks for using scylla.sh and welcome! This is and always will be free. Direct donations to scylla.sh are on hold, If you want to help me out personally because you use or like this project, my father has a side project for an app-based automated drip irrigation system for growing plants in your house (hint: it works well for weeds of a certain nature in legal states). Instead of support to scylla check out and donate to his Kickstarter if it looks interesting to you. Every tiny bit helps! Thanks everyone!

Why Scylla?

scylla.sh has two major goals. One is to have a community-oriented database leak community and make a useful tool for security researchers

The other major goal is to undercut those people that are selling databases. If we can provide a free product here, we are eating into the bottom-line of those people selling leaked dbs for thousands of dollars. This de-incentivises buying of those DBs and therefore posting them in the first place. Even places that are supposedly "ethical" (looking at you HIBP) still have no problem selling your data. scylla.sh is and *will always* be free with an open API.

*Search is in beta, please report bugs to the scylla github repo

ipusernameuserpasshashdomainnameemailpassword
nullnullnullnullCollectionsnullalexisjose@email.com17072006alexis
nullnullnull40f75f4f46abfd410a6e334fb4346c8cd89f6ea1linkedin.comnull26308267null
nullnullnull9263161979e02b21e80bcb6fadde92607c9e2103linkedin.comnull153478063null
nullnullalterheiko@googlemail.com93c06399ce74ff6553966aa06346e4a5badoo.comnullnullnull
nullnullnull$2a$08$h7uoYMfqI377D7nJnhOSju7oJcH6rWj2PUYX6X6nHFkHzStstg4.Cdropbox.comnullsalwanimri@gmail.comnull
nullnullnullnullCollectionsnullkjcvf@mail.ruVFKBYF
nullnullangelmoryc_2@hotmail.comf1908d6aa731d7d3f6877494847953d3badoo.comnullnullnull
nullnullnullnullCollectionsnullcoe1213164@testwww.commandersofevony.com8f7a86bb
nullnullnull$2a$08$RT1kCQ5eZMdhlOb04llCAOWrmwfHLBy8xsDh1tfElVuGXvNa/eLHCdropbox.comnullsimon.holmes3@gmail.comnull
nullnulldiver5221@bestseniorlove.infoce68471326ec82722d6e963345c875f4badoo.comnullnullnull
nullnullnullnulllinkedin.comnull91186830xxx
nullnullnull16d94656218cf1a784953a204bf6d8abfb8541e9linkedin.comnullwarleyyelraw@yahoo.com.brnull
nullnullnullnulllinkedin.comnull127109252xxx
nullnullalexdietroeavanti@hotmail.it3d5b52c266bf744db10c87824e73fdf0badoo.comnullnullnull
nullnullnull5c3fdc9d929e3729a7304541354674c92bcc6f36linkedin.comnulldoug.tibbs3@yahoo.comnull
83.165.56.16nullnullnull000webhost.comManuel Cagiaomanuel@wja.esman-2144
nullnullnullnulllinkedin.comnull130432240xxx
nullnullsgrh45848333dd@yopmail.comc063aa1061458ebe9672275441744478badoo.comnullnullnull
nullnullvives333@hotmail.come10adc3949ba59abbe56e057f20f883ebadoo.comnullnullnull
nullnullbernard_6945@hotmail.fr63ea80969a45f9166d8f281f5713afaabadoo.comnullnullnull
nullnullnull4418a55359cea5f721e174158d9f3e5d607c0274linkedin.comnull130459963null
nullnullnull$2a$08$JwOXgTXqBn8XI34bKZbJaOW2en/GL8OXnqSr9cnNFpS/JVjfWUIoadropbox.comnullpangalaktischerdonnergurgler@gmx.denull
nullnullmarian_elda_16@hotmail.es304c860ca2d97dcb48d7fa7ec0f55a13badoo.comnullnullnull
nullnullnullnull7k7k.comnullè??ú????°?123abc456def
nullnullnull675dc611bafb0b7348dd3baf7e005b6916fb954dlinkedin.comnullmillerdds@bellsouth.netnull
nullnullnullnulllinkedin.comnull155336992xxx
nullnullnull216d7c570386440f194fad48ed48abf12004f1a0linkedin.comnullnullnull
nullnullnullnullCollectionsnullggggggggg.@gmailtroll
nullnullnullee382855daf785db7d5918070b084544001edbcelinkedin.comnulljames.autry@twcollision.comnull
nullnulladvije-vushe@hotmail.come6d6ddce24518b607d48e10773435215badoo.comnullnullnull
nullnullnullnullCollectionsnullgralul@hotmail.comoutlaw
nullnullnull7e3b1368482093b70e5b58a0ad6e2c9c0b151747linkedin.comnullrtendolle@hotmail.comnull
nullnullnullnullCollectionsnulllesliemann@live.comDli23
nullnullnullnulllinkedin.comnullgrespondek@hotmail.comxxx
nullnullnull58019607e8dac34f5693f93053826db6d880667dlinkedin.comnull26370463null
nullnullnullb0f44571644f9ea3c4440bb803853a4dda25237elinkedin.comnull4574367null
181.59.30.212tebanull872263862501fff6c6071c8c378990a9b5a4f8a9773fc88836b787787b58dc44b97fd938eb825021e0fe7c74508ca38921ef76bfa7a1c053e8f8ea1029ccfb46leet.ccnullteba@gmail.comnull
nullnullnicolas.tenailleau@hotmail.frbdf3c32126da71502bfacf5dbf2819bdbadoo.comnullnullnull
nullnullnull70893b6fee6d15d2078b760b8ee1e4a7d0cbeafelinkedin.comnull55172817null
nullnullnullde8a1f49d7acf49ad3a5f5b4e19dadc25a0c29c6linkedin.comnull52151024null
nullnullnullnulllinkedin.comnull605090xxx
nullnullnullnulllinkedin.comnull43962882xxx
nullnullnullbad36c592c8f0fccd91ccf31b93ce0ec4005abddlinkedin.comnull151540709null
nullnullnullnulllinkedin.comnull20399580xxx
nullnullnullnullCollectionsnullmarie.suzanne1985@hotmail.frtawyrufi
nullnullnull74c4671eefd96c60cb7a84af6abd5eb0a3da8f4dlinkedin.comnullchaitanya.gupta66@gmail.comnull
nullnullnull$2a$08$TeI9LYFfqXTS2nb7OqNHgeHOnXf/XXR5msBc/eytb3TD53poO5pYWdropbox.comnullcamila@azdirect.com.brnull
nullnullnulle49c04dd1e51b69b7abe93f9e09c319c96c47aadlinkedin.comnull139972316null
54.172.58.157edit1null4480f81d5b63629e5967bb6fa1e3ccb9cdf6471c36a1ac7cf67860ae38239c71a399024ee90f63a77d131eed7a5f2646b4dd922b6b05de9e25a4888158280c57leet.ccnullnullnull
nullnullnullnulllinkedin.comnull15325837 f695d6fcd6ab0d389e6a950eac8ef19282728be6 -> tero.salminen@efima.com
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99



Queries

Queries use Lucene query syntax. Please note that queries have changed, you no longer need to capitalize the first letter of each field, scylla will rectify automatially if you do use the capital letter. You will get a 500 error if your query is incorrect. Use the fields listed above to guide you. Full query syntax (including wildcards) are supported

Example search for passwords that start with ff
    
      password:ff*
    
  
This would match any passwords with a d in them and the username dave, dale, dane, etc.
    
      name:da?e password:*d*
    
  

API

The search API can be accessed by sending a GET request to this page with the Accept header set to Accept: application/json

GET https://scylla.sh/search?q=your_query&num=100&from=200

The above GET request grabs 1000 results of your_query starting at the 200th record. Pagination can be done using the "from" parameter. Queries return the first 10,000 hits.

Data is returned in JSON format like the following:

[
   {
      "_id":"hKW8WWsBBGJneKoTbFS-",
      "_index":"pw_data",
      "_score":19.8656,
      "_source":{
         "Domain":"exploit.in",
         "Email":"marin.vardic@zzf.hr",
         "Password":"freeshit"
      },
      "_type":"_doc"
   },
   {
      "_id":"_3PgVGsBBGJneKoTof0e",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"linkedin.com",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "PassHash":"a3f5b3b7c790e397b2d77eca31cd96bcd57c8700"
      },
      "_type":"_doc"
   },
   {
      "_id":"dBmbWmsBBGJneKoTZ5Wk",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"exploit.in",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "Password":"vili2005"
      },
      "_type":"_doc"
   }
]



Note you may use the fields below to guide you, but not all fields are returned with each query, only available fields. If fields are added, they will be appended to the list of available fields for query.

ToS

The information on this website is intended only for research purposes. Access has been given to security or other researchers for the purposes of research ONLY. Other than that I sincerely hope this data helps you with your projects and aids in your understanding of your or your organization's security posture. Much love.

- _hyp3ri0n

ToS Enforcement

The information on this website is intended only for research purposes. We search common database leak sites to ensure this is not being circulated for malicious use. We do have default logging turned on for this website which likely includes IP addresses and other identifiers. Please don't misuse this information as we will cooperate with law enforcement if it is.

By the way, for old users, by popular request there is no longer a cryptominer on this website.

- _hyp3ri0n

Donations

Donations for scylla.sh are currently on hold! If you want to help please donate to my father's kickstarter project as described above.

Issues and Bugs

Scylla is currently in beta-v0.1. There will be bugs, Please report bugs to the scylla open github repo. Here you will also find the scylla code, please feel free to open feature requests here as well. These let me know what the community wants out of this site and is supremely useful to me.