[Crizz_Mattel99]

Hi guys :), I knew here and I have become really interested in everything related to stealers because I have seen that many attacks happen through them. Also, I have noticed that many people are selling logs, tools, and even builders, and I would like to learn how to make one from scratch (even if it’s basic to start).
What I find really interesting is:

• How they extract passwords from browsers
• How they steal Discord tokens
• How the stolen data is sent
• How to avoid detection by antivirus

Honestly, I not looking to copy a complete project, but rather to understand how the logic behind one is built.
I have been looking at some GitHub repos and many use Python and then convert to .exe with PyInstaller, but I want to know which programming language or tool would suit me best. I already have basic programming knowledge and I use Windows and Linux.
To be honest, I have done things like creating simple executables on other topics.
I would really appreciate it if someone could share tips, books, tutorials, or just give me advice on what not to do—mainly to avoid getting burned or detected immediately. And if anyone wants to collaborate, you’re very welcome.

[emrys]

To answer a few of your questions.

1. They'll usually have an list/dictionary of all major browser paths on your pc (e.g: %appdata%/Google/Chrome/User Data) and inside there is a "Local State" folder which contains a encryption key which chrome uses to encrypt your saved passwords and then decrypt from a .db file.
2.  As like above there's paths in local app data folder which will steal from the browser and the discord client (similarly to chrome stored into a .ldb/.log file)
3. Usually they just get sent to a discord/telegram webhook channel but more sophisticated ones will store to a gofile.io download or a private server
4. Not entirely sure how this one works sorry.

[Crizz_Mattel99]

Thank you very much for your contribution, it’s truly a great help to me :)