Home Help Me Help You Want your own scylla?
Follow @_hyp3ri0n

0-day Hunting

Though this project is personally mine (_hyp3ri0n) I have a super exciting project I wanted to point people to from my company Hyperion Gray. Please note it is non-free (not trying to bait and switch you). If you use this project you're likely interested in this :). Information can be found here

Want to help?

Hey folks! Thanks for using scylla.sh and welcome! This is and always will be free. Direct donations to scylla.sh are on hold, If you want to help me out personally because you use or like this project, my father has a side project for an app-based automated drip irrigation system for growing plants in your house (hint: it works well for weeds of a certain nature in legal states). Instead of support to scylla check out and donate to his Kickstarter if it looks interesting to you. Every tiny bit helps! Thanks everyone!

Why Scylla?

scylla.sh has two major goals. One is to have a community-oriented database leak community and make a useful tool for security researchers

The other major goal is to undercut those people that are selling databases. If we can provide a free product here, we are eating into the bottom-line of those people selling leaked dbs for thousands of dollars. This de-incentivises buying of those DBs and therefore posting them in the first place. Even places that are supposedly "ethical" (looking at you HIBP) still have no problem selling your data. scylla.sh is and *will always* be free with an open API.

*Search is in beta, please report bugs to the scylla github repo

userpasshashdomainemailpassword
nullb94fe8adcfe0c76c2465f5c0ecce2583b375218blinkedin.comammenezes@santander.com.brnull
null$2a$08$1lP5E5oNvU1umrp7BCyMauSkKzP5SSdWBIcac/hrjRNESGz6TnZRedropbox.comryan.j.heyer@gmail.comnull
nullnullCollectionsdima_veretko@ukr.netdima_veretko
nulle61cba788d5078c2536e68734724d964ba5c9774linkedin.com168982555null
gloriaicc11@hotmail.comc4797f425c0624f49416721f09795644badoo.comnullnull
nullf447076bd2fa50271a7cb0db998082a4e157d0f8dropbox.combudtillerik@gmail.comnull
nullnulllinkedin.com2737331xxx
null3dbc91065342dda4a9e732bf929a0f39ff677fe8linkedin.com94105954null
nullnullCollectionscoe868043@testwww.commandersofevony.com476333b1
null236795ac30bcfc92323faf93114380b48637e3f3dropbox.comxox.swe3tartz@hotmail.comnull
null66ae4a358506e9eb767c89bfbf3440e15d103bc8linkedin.comsnowlyf@yahoo.com.sgnull
nulld3cc6e0b442c497d041bbf5e509dae9308ef489cdropbox.comgalimonti@ibany.comnull
null2d9f8d38efdb21af8ea7c15ceed70e5d0ec9a011linkedin.com114577768null
nulld311b1c8e5fe83187cf2d83c8e080dbcff9fc4eflinkedin.com17623647null
nullnullCollectionsbenita1000@live.com123456
null539852c26f8b34125b68e5533cc6bd9c2579277alinkedin.com10600038null
null15d2eabe11f45e406d6aad5c1d015e8d3a6ee192linkedin.com92122086null
nullnullCollectionsbat.17@mail.ru2546735609b
null7633ba1702443281b00bdf83c79717731e905b71linkedin.comjulialin71@gmail.comnull
nullf7868aaebdd2440069115de1dc85b44dd9fcd446linkedin.commavela59@gmail.comnull
nullnulllinkedin.comgoku_82465@hotmail.comxxx
null708ed0041841521b56fdafea433f4864b698f68bdropbox.commedina.c@live.comnull
null7cc65e4260e5cbb812c69c8e8063799e975f94b6linkedin.comACHEQUELELE@HOTMAIL.COMnull
nulle689a3ad12b2058a4c49da0a6fb50f59f9202bc0dropbox.comrabiaa@serviceseta.org.zanull
null50fe121af8b91f0b903083fcfb2a8e28837582a8linkedin.comjyc_rd@yahoo.comnull
cousininha@hotmail.com3ee1f1657b8fe63f1a297954fae2181fbadoo.comnullnull
nullnulllinkedin.comdomvallep@yahoo.comxxx
nulldc25e81cc1d4c3c9b3adea7c02615bbb3be0859elinkedin.com92059646null
meti28@hotmail.co.uk24a03faf64f4341897359ef9b2cc4569badoo.comnullnull
baranovskij86@mail.ru8238a41d715ecc7d2e7a16ec4a98b179badoo.comnullnull
patrick.starkl@hotmail.com8daa8ee4cca1bddbbe31192e0d5cfa97badoo.comnullnull
null6367c48dd193d56ea7b0baad25b19455e529f5eelinkedin.com57504806null
null5d45a009b0383b5b3064b9820c18530333c910f9linkedin.com61551993null
nullnulllinkedin.com44121010xxx
null045f544bd4e5f95c80d551c1660bf387227af72adropbox.combernard.bekavac@fh-htwchur.chnull
nullnulllinkedin.com89167341xxx
nullnulllinkedin.comLiles@north.imsaindy.orgxxx
null656e0d825cfc4a01fe1295d5732d2f2e0ace089ddropbox.comdropbox@toledotactical.comnull
null7d17195ec7445a4a3512aed722fea686dd6df3d2linkedin.com147450287null
nullbad976af426667fcbe1959ddfa638c38a9f1a57dlinkedin.com67960557null
roge_yeya@hotmail.comd1758455c08ad982dbfcb5f34d1156b2badoo.comnullnull
nullnullCollectionsbelchys@hotmail.comvivalamusica
nullnullCollectionsrtuy@pg.commarino
tereaya@hotmail.com305e08bb493e15d45d342758683b5f1ebadoo.comnullnull
nullnullCollectionsf.quarantelli@libero.itgante8r6ca
nullnullCollectionspurple_daisys91@yahoo.comflowers
rfps@live.fr73a6511b932ba38b2469c67566f567a9badoo.comnullnull
null79dc75a60c811b84722b36b2ebe20e562e43b89elinkedin.comudayrajuri@yahoo.comnull
nullnullCollectionsPoKaDoTscutiex0x@aol.comsprouse7
null$2a$08$dNxJjUDoqBntYYrnIrZpdOncO3lAykjLpXdb7XwgIhPzxQgh.OSSadropbox.comfabrice_walle@euskalnet.netnull
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99



Queries

Queries use Lucene query syntax. Please note that queries have changed, you no longer need to capitalize the first letter of each field, scylla will rectify automatially if you do use the capital letter. You will get a 500 error if your query is incorrect. Use the fields listed above to guide you. Full query syntax (including wildcards) are supported

Example search for passwords that start with ff
    
      password:ff*
    
  
This would match any passwords with a d in them and the username dave, dale, dane, etc.
    
      name:da?e password:*d*
    
  

API

The search API can be accessed by sending a GET request to this page with the Accept header set to Accept: application/json

GET https://scylla.sh/search?q=your_query&num=100&from=200

The above GET request grabs 1000 results of your_query starting at the 200th record. Pagination can be done using the "from" parameter. Queries return the first 10,000 hits.

Data is returned in JSON format like the following:

[
   {
      "_id":"hKW8WWsBBGJneKoTbFS-",
      "_index":"pw_data",
      "_score":19.8656,
      "_source":{
         "Domain":"exploit.in",
         "Email":"marin.vardic@zzf.hr",
         "Password":"freeshit"
      },
      "_type":"_doc"
   },
   {
      "_id":"_3PgVGsBBGJneKoTof0e",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"linkedin.com",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "PassHash":"a3f5b3b7c790e397b2d77eca31cd96bcd57c8700"
      },
      "_type":"_doc"
   },
   {
      "_id":"dBmbWmsBBGJneKoTZ5Wk",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"exploit.in",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "Password":"vili2005"
      },
      "_type":"_doc"
   }
]



Note you may use the fields below to guide you, but not all fields are returned with each query, only available fields. If fields are added, they will be appended to the list of available fields for query.

ToS

The information on this website is intended only for research purposes. Access has been given to security or other researchers for the purposes of research ONLY. Other than that I sincerely hope this data helps you with your projects and aids in your understanding of your or your organization's security posture. Much love.

- _hyp3ri0n

ToS Enforcement

The information on this website is intended only for research purposes. We search common database leak sites to ensure this is not being circulated for malicious use. We do have default logging turned on for this website which likely includes IP addresses and other identifiers. Please don't misuse this information as we will cooperate with law enforcement if it is.

By the way, for old users, by popular request there is no longer a cryptominer on this website.

- _hyp3ri0n

Donations

Donations for scylla.sh are currently on hold! If you want to help please donate to my father's kickstarter project as described above.

Issues and Bugs

Scylla is currently in beta-v0.1. There will be bugs, Please report bugs to the scylla open github repo. Here you will also find the scylla code, please feel free to open feature requests here as well. These let me know what the community wants out of this site and is supremely useful to me.