Home Help Me Help You Want your own scylla?
Follow @_hyp3ri0n

0-day Hunting

Though this project is personally mine (_hyp3ri0n) I have a super exciting project I wanted to point people to from my company Hyperion Gray. Please note it is non-free (not trying to bait and switch you). If you use this project you're likely interested in this :). Information can be found here

Want to help?

Hey folks! Thanks for using scylla.sh and welcome! This is and always will be free. Direct donations to scylla.sh are on hold, If you want to help me out personally because you use or like this project, my father has a side project for an app-based automated drip irrigation system for growing plants in your house (hint: it works well for weeds of a certain nature in legal states). Instead of support to scylla check out and donate to his Kickstarter if it looks interesting to you. Every tiny bit helps! Thanks everyone!

Why Scylla?

scylla.sh has two major goals. One is to have a community-oriented database leak community and make a useful tool for security researchers

The other major goal is to undercut those people that are selling databases. If we can provide a free product here, we are eating into the bottom-line of those people selling leaked dbs for thousands of dollars. This de-incentivises buying of those DBs and therefore posting them in the first place. Even places that are supposedly "ethical" (looking at you HIBP) still have no problem selling your data. scylla.sh is and *will always* be free with an open API.

*Search is in beta, please report bugs to the scylla github repo

ipusernameuserpasshashdomainnameemailpassword
nullnullberonika-pm@hotmail.com1eab403bf51fd6cb8000cf7b7075cde7badoo.comnullnullnull
nullnulljaroslaw_janik14@op.pl342216a14d7f948fb7bd268cfbf1486bbadoo.comnullnullnull
nullnullgladka_d@interia.pl239b287c3482e2e571a5427ca681d726badoo.comnullnullnull
nullnullnullad12699cf2ac37249aa362562fbfad36a318c741linkedin.comnull159087734null
nullnullnull2f33c0f3d3b42e694d398b221ee44ae8f41fdd31linkedin.comnullibrahim2504@hotmail.comnull
nullnullnullnulllinkedin.comnull44251170xxx
nullnullnullnullCollectionsnulltretiy.1991@mail.ru24504190
nullnullnullnullCollectionsnullmontieb2@aol.combradley
49.230.120.225BobbieGameZnull12c254ad22dd4c5242f575f74fb49612de2f61415adafc6d15a15f1be8f13cd1d4cb93f2b1dd867b362cc48b435775df48d5226592a5ababbcccb7c81df98187leet.ccnulljshvsg11@gmail.comnull
nullnullnullnulllinkedin.comnull36829660xxx
nullnullnullc97d122a078990f1d30c2028f6f664153e160515linkedin.comnull45400678null
nullnullnull084a3501edef6845f2f1e4198ec3a2b81cf5c6bclinkedin.comnull144959845null
nullnullnullf33643984e459f5a55dba423624495c90ef2dce1linkedin.comnull108405286null
nullnullnullnullCollectionsnullalexisyosmeljm@yahoo.comalexisjm
nullnullnullnulllinkedin.comnull69975210xxx
nullnullnulld0df5cb75aac4a4471f6772829fc5bcb9e9eb282dropbox.comnullstefanoairaghi@hotmail.itnull
nullnullnull051df7161f512523762fe562c99c26d7e212d296linkedin.comnullgwboehm@att.netnull
nullnullp62n62@hotmail.comd70a73d9074a4b21eddc543753f40e9fbadoo.comnullnullnull
nullnullnull020a7dc5d4598573f06c2c58033e680d68589dd1dropbox.comnullpablo.jure@gmail.comnull
nullnullnull$2a$08$JZNwb.Zz.Uh5Jo4mXznpqe8hMHm8iKVVa51R11cD39wNmFGwTY6W6dropbox.comnullcoraliemurcia@gmail.comnull
nullnullnull42d0dcee94dc945208520c4305a17620d419e541linkedin.comnull150300415null
nullnullzericksil@yahoo.com.br19ce7374ce0fd603084148e1573f25f2badoo.comnullnullnull
nullnullnullnulllinkedin.comnull34776790xxx
nullnullnull7c1fd6bed67f7f2da0f1aabc484fa96589e14b51linkedin.comnull36819235null
nullnullyorgun.samuray42@hotmail.com8b82411beb07517773b3170ebd86d746badoo.comnullnullnull
nullnullnullnull7k7k.comnull坐看云起埘27706010
nullnullamparosc.264@gmail.come4a4a96a69a1b2b530b3bec6734cdf52badoo.comnullnullnull
200.198.136.76nullnullnull000webhost.comRafael Toninrtonin@gmail.com000webh87v
nullnullnulldc47cba7a6eaa64b4073485680de9bda6cff6270linkedin.comnull54795763null
nullnullnull8084d1cfb3c84c3a29a6fe8fdac9331cfac75745linkedin.comnullUrsulaBrandenzz@yahoo.comnull
nullnullnullnullCollectionsnulltimw@imagecompanies.commarch32672
nullnullnullf0b12a0c125a0fcf84784ba813318f6d889d5b4blinkedin.comnull149150785null
nullnulloscarbriand@live.fre3b12fa1536d58d119c0170faf65edc2badoo.comnullnullnull
nullnullnullnullCollectionsnullkostik05marbu@inbox.lv05marabu
nullnullnullnullCollectionsnullrathis@live.derathis
nullnullnullnullCollectionsnullmirko-lino91@live.itescalaplano
nullnullnullnulllinkedin.comnullsmolsen@comcast.netxxx
nullnullnullb21975e7f48ab8c8f2bf6b7f7fa86f9c3f66039blinkedin.comnull75155596null
nullnullnull31ff66cd8bf1a5310cc5c4aa96379bff124d9354dropbox.comnulllmweaver@bsu.edunull
nullnullaamroune@live.frd466047252f41b38df0a5ff7a809ac98badoo.comnullnullnull
nullnullnulla7f639ff5584dcd1099bc0c804e93d69a95ddb31dropbox.comnullrj_p1017@yahoo.comnull
nullnullzebmckein@wp.plc6afdf8ae2ebcf998398b8b0a19e04aabadoo.comnullnullnull
nullnullnullnullCollectionsnullgn.grau@gmail.comilovehorses
nullnullnullnullCollectionsnullBert.DeBacker@minecraft.comBert2006
178.76.22.229nullnullnull000webhost.comkommunistkommunist96@amail.azaz123456
nullnullnullnull7k7k.comnullgui250394240@sina.comzhangfeng521
nullnullnullnullCollectionsnulljennie_R_06@hotmail.comtoosweet
nullnullnullnullCollectionsnullartu998@interia.plartu99
nullnullnullb1c4e4fce3ca9bbde08b9969006872b0ea02d5e4linkedin.comnulladrienne.loftin@spacenet.comnull
192.162.135.134nullnullnull000webhost.comMandallannijtr208@yahoo.comygazanu493
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99



Queries

Queries use Lucene query syntax. Please note that queries have changed, you no longer need to capitalize the first letter of each field, scylla will rectify automatially if you do use the capital letter. You will get a 500 error if your query is incorrect. Use the fields listed above to guide you. Full query syntax (including wildcards) are supported

Example search for passwords that start with ff
    
      password:ff*
    
  
This would match any passwords with a d in them and the username dave, dale, dane, etc.
    
      name:da?e password:*d*
    
  

API

The search API can be accessed by sending a GET request to this page with the Accept header set to Accept: application/json

GET https://scylla.sh/search?q=your_query&num=100&from=200

The above GET request grabs 1000 results of your_query starting at the 200th record. Pagination can be done using the "from" parameter. Queries return the first 10,000 hits.

Data is returned in JSON format like the following:

[
   {
      "_id":"hKW8WWsBBGJneKoTbFS-",
      "_index":"pw_data",
      "_score":19.8656,
      "_source":{
         "Domain":"exploit.in",
         "Email":"marin.vardic@zzf.hr",
         "Password":"freeshit"
      },
      "_type":"_doc"
   },
   {
      "_id":"_3PgVGsBBGJneKoTof0e",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"linkedin.com",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "PassHash":"a3f5b3b7c790e397b2d77eca31cd96bcd57c8700"
      },
      "_type":"_doc"
   },
   {
      "_id":"dBmbWmsBBGJneKoTZ5Wk",
      "_index":"pw_data",
      "_score":16.46111,
      "_source":{
         "Domain":"exploit.in",
         "Email":"jasna.cajsa-beber@zzf.hr",
         "Password":"vili2005"
      },
      "_type":"_doc"
   }
]



Note you may use the fields below to guide you, but not all fields are returned with each query, only available fields. If fields are added, they will be appended to the list of available fields for query.

ToS

The information on this website is intended only for research purposes. Access has been given to security or other researchers for the purposes of research ONLY. Other than that I sincerely hope this data helps you with your projects and aids in your understanding of your or your organization's security posture. Much love.

- _hyp3ri0n

ToS Enforcement

The information on this website is intended only for research purposes. We search common database leak sites to ensure this is not being circulated for malicious use. We do have default logging turned on for this website which likely includes IP addresses and other identifiers. Please don't misuse this information as we will cooperate with law enforcement if it is.

By the way, for old users, by popular request there is no longer a cryptominer on this website.

- _hyp3ri0n

Donations

Donations for scylla.sh are currently on hold! If you want to help please donate to my father's kickstarter project as described above.

Issues and Bugs

Scylla is currently in beta-v0.1. There will be bugs, Please report bugs to the scylla open github repo. Here you will also find the scylla code, please feel free to open feature requests here as well. These let me know what the community wants out of this site and is supremely useful to me.