If you're interested in dev tools, I can't recommend eval villain enough. It only works on Firefox, but it helps a lot with identifying xss vulnerabilities.

https://www.hurricanelabs.com/blog/making-easy-dom-xss-actua...