diff --git a/README.md b/README.md
index 76ce998..f2427e9 100644
--- a/README.md
+++ b/README.md
@@ -110,6 +110,7 @@
     - [6.1.7 pwn 0CTF2015 freenote](doc/6.1.7_pwn_0ctf2015_freenote.md)
     - [6.1.8 pwn DCTF2017 Flex](doc/6.1.8_pwn_dctf2017_flex.md)
     - [6.1.9 pwn RHme3 Exploitation](doc/6.1.9_rhme3_exploitation.md)
+    - [6.1.10 pwn 0CTF2017 BabyHeap2017](doc/6.1.10_0ctf2017_babyheap2017.md)
   - re
     - [6.2.1 re XHPCTF2017 dont_panic](doc/6.2.1_re_xhpctf2017_dont_panic.md)
     - [6.2.2 re ECTF2016 tayy](doc/6.2.2_re_ectf2016_tayy.md)
diff --git a/SUMMARY.md b/SUMMARY.md
index 020c6ef..e6117cf 100644
--- a/SUMMARY.md
+++ b/SUMMARY.md
@@ -98,6 +98,7 @@ GitHub 地址：https://github.com/firmianay/CTF-All-In-One
     * [6.1.7 pwn 0CTF2015 freenote](doc/6.1.7_pwn_0ctf2015_freenote.md)
     * [6.1.8 pwn DCTF2017 Flex](doc/6.1.8_pwn_dctf2017_flex.md)
     * [6.1.9 pwn RHme3 Exploitation](doc/6.1.9_rhme3_exploitation.md)
+    * [6.1.10 pwn 0CTF2017 BabyHeap2017](doc/6.1.10_0ctf2017_babyheap2017.md)
   * re
     * [6.2.1 re XHPCTF2017 dont_panic](doc/6.2.1_re_xhpctf2017_dont_panic.md)
     * [6.2.2 re ECTF2016 tayy](doc/6.2.2_re_ectf2016_tayy.md)
diff --git a/doc/6.1.10_0ctf2017_babyheap2017.md b/doc/6.1.10_0ctf2017_babyheap2017.md
new file mode 100644
index 0000000..99bc195
--- /dev/null
+++ b/doc/6.1.10_0ctf2017_babyheap2017.md
@@ -0,0 +1,8 @@
+# 6.1.10 pwn 0CTF2017 BabyHeap2017
+
+- [题目解析](#题目解析)
+
+
+[下载文件](../src/writeup/6.1.10_0ctf2017_babyheap2017)
+
+## 题目解析
diff --git a/doc/6_writeup.md b/doc/6_writeup.md
index 36c00f6..7f7054b 100644
--- a/doc/6_writeup.md
+++ b/doc/6_writeup.md
@@ -10,6 +10,7 @@
   - [6.1.7 pwn 0CTF2015 freenote](6.1.7_pwn_0ctf2015_freenote.md)
   - [6.1.8 pwn DCTF2017 Flex](6.1.8_pwn_dctf2017_flex.md)
   - [6.1.9 pwn RHme3 Exploitation](6.1.9_rhme3_exploitation.md)
+  - [6.1.10 pwn 0CTF2017 BabyHeap2017](6.1.10_0ctf2017_babyheap2017.md)
 - re
   - [6.2.1 re XHPCTF2017 dont_panic](6.2.1_re_xhpctf2017_dont_panic.md)
   - [6.2.2 re ECTF2016 tayy](6.2.2_re_ectf2016_tayy.md)
diff --git a/src/writeup/6.1.10_0ctf2017_babyheap2017/babyheap b/src/writeup/6.1.10_0ctf2017_babyheap2017/babyheap
new file mode 100755
index 0000000..c7e98ce
Binary files /dev/null and b/src/writeup/6.1.10_0ctf2017_babyheap2017/babyheap differ