Recomendo:

• PortSwigger: https://portswigger.net/web-security/cross-site-scripting/cheat-sheet
• Hack The Box Academy: https://academy.hackthebox.com/