Btw I have no idea why the text is formed like that. I didn't type it that way.

What kind of encodings are used for bypassing SQL filters? Does Hex or Base64 work? What other kinds of encodings are used for this? And if I'm trying to test the filter of a login function,
can I just put the encoded string into the input field, or do I need to use an intercepting proxy?
I know a proxy has to be used for things that aren't editable like cookies, http headers etc but do I need a proxy for things I can directly edit, like input fields?

If you want a book, you should read Hacking: The Art Of Exploitation. Even if you cant program in C or Assembly it should get you into writing exploits. If you can do that well, you should read The Shellcoders Handbook, which goes a little bit further than The Art Of Exploitation but both will teach you how to write exploits, and how exploits work.

If you want to learn exploit development you're gonna have to learn C eventually, and possibly Assembly. Python will also be useful. But I would suggest reading Gray Hat Python for this.

Okay, thanks. That answers my question nicely 

I thought Javascript code was limited to client-side browser stuff. Can Javascript even make a TCP connection? If it can, then yes that would answer my question very nicely. But I was thinking more along the lines of something like emailing the contents of the cookie, or some other web-related method of delivering it but that will work well. Thanks.

Okay I'm new to this site so I'm hoping me question doesn't come off as malicious. This is for school, so I'm not trying to do anything evil. Anyways, I was wondering if its possible to snatch a cookie using XSS, and deliver it to an attacker without sending it to an attacker controlled domain. Like if an attacker didn't own a domain, or if the domain was blocked, is there any other method or trick that can be used to recieve the cookie? I can code in Javascript relatively well, so you can talk about Javascript functions, methods etc. And thats encouraged because I'm interested in the coding perspective so please give me your ideas. Thanks. 

I personally don't think so, but thats just my opinion. I would recommend reading books on Javascript. But w3schools should get you a great start at the very least, so its a good place to begin.