Bug Bounty Reference is a curated collection of bug bounty write-ups organized by vulnerability type and exploitation technique. The resource categorizes documented security findings across multiple vulnerability classes including Cross-Site Scripting (XSS), SQL Injection (SQLi), XML External Entity (XXE), Remote Code Execution (RCE), deserialization flaws, Image Tragick vulnerabilities, Cross-Site Script Inclusion (XSSI), and Cross-Site Request Forgery (CSRF). The collection serves as a knowledge repository for security researchers and bug bounty hunters by providing real-world examples of vulnerability discovery and exploitation methodologies. Each write-up documents the technical details of how specific security flaws were identified, analyzed, and reported in actual bug bounty programs. The resource organizes content by vulnerability categories, making it easier for researchers to study specific types of security issues and understand common attack patterns. The write-ups include technical explanations of exploitation techniques, proof-of-concept demonstrations, and insights into the discovery process used by security researchers.