Take it like a gift
Cross-site scripting cheat sheet
PortSwigger XSS cheat sheet that contains many vectors that can help you bypass WAFs and filters.
SweetPotato
A collection of various Windows privilege escalation techniques from service accounts to SYSTEM.