ssl's tracked open-source repos, sorted by stars.
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.