XSS Ninja.

The ultimate source for cross-site-scripting for white-hat pen-testers.