regex101 : Free PCRE-based regular expression debugger with real time explanation, error detection and highlighting.
XSS Filter Evasion Cheat Sheet - OWASP : This article is focused on providing application security testing professionals with a guide to assist in Cross Site Scripting testing.
Requestdiff : Differentiate HTTP headers and content body of two GET URLs.