Kleine XSS-Seite zum selber üben
An open webservice, that let cute little XSSler store their stolen session credentials
PHP-Source code for a xss-scanner tool
Browser based tool for website XSS testing
Anleitung, wie man in php utf7-strings zur filter evasion erzeugt