You gotta learn terminology e to get what you're trying to find.
It's Cookie stealers, Token Grabbers, and drainers if you're trying to grab accounts, or just snatch passwords n get databases you need to have knowledge of how a website stores its data.