Post XSS Exploitation : Advanced Attacks and Remedies
ClubHack Magazine issue April 2012
Tools Catalog
TechTalk - Cross Site Scripting XSS
apr2012