Zombie.js : Zombie.js is a lightweight framework for testing client-side JavaScript code in a simulated environment. No browser required.
PhantomJS : PhantomJS is a headless WebKit with JavaScript API. It has fast and native support for various web standards: DOM handling, CSS selector, JSON, Canvas...
XSS Filter Evasion Cheat Sheet - OWASP : This article is focused on providing application security testing professionals with a guide to assist in Cross Site Scripting testing.
SlimerJS : A scriptable browser for Web developers
DOM Storage Query Language : DOM Storage Query Language (DomSQL) is an SQL inspired interface for DOM Storage (or Web Storage as defined in the W3C working draft).
A passive reconnaissance tool inside the DOM (experimental)