securitylearn.net
XSS Cheat sheet
Best xss vector: If you know there is an XSS and if you are unable to identify the exact code which pop-ups the alert message, then use this vector. javascript:/*–>