Where are the WordPress capabilities stored?

Since ‘Administrator’ has all capabilities (unless you have a Multisite setup), just get a list of all the caps in the Admin role:

$admin_caps = get_role('administrator')->capabilities;