diff --git a/README.md b/README.md
index 06d2eff..a1bfd80 100644
--- a/README.md
+++ b/README.md
@@ -72,6 +72,7 @@
   - [6.3 pwn xdctf2015 pwn200](doc/6.3_pwn_xdctf2015_pwn200.md)
   - [6.4 pwn njctf2017 233](doc/6.4_pwn_njctf2017_233.md)
   - [6.5 pwn 0ctf2015 freenote](doc/6.5_pwn_0ctf2015_freenote.md)
+  - [6.6 re xhpctf2017 dont_panic](doc/6.6_re_xhpctf2017_dont_panic.md)
 
 - [七、附录](doc/7_appendix.md)
   - [7.1 更多 Linux 工具](doc/7.1_Linuxtools.md)
diff --git a/SUMMARY.md b/SUMMARY.md
index 2e6e148..568cf14 100644
--- a/SUMMARY.md
+++ b/SUMMARY.md
@@ -68,6 +68,7 @@
   * [6.3 pwn xdctf2015 pwn200](doc/6.3_pwn_xdctf2015_pwn200.md)
   * [6.4 pwn njctf2017 233](doc/6.4_pwn_njctf2017_233.md)
   * [6.5 pwn 0ctf2015 freenote](doc/6.5_pwn_0ctf2015_freenote.md)
+  * [6.6 re xhpctf2017 dont_panic](doc/6.6_re_xhpctf2017_dont_panic.md)
 * [七、附录](doc/7_appendix.md)
   * [7.1 更多 Linux 工具](doc/7.1_Linuxtools.md)
   * [7.2 更多 Windows 工具](doc/7.2_wintools.md)
diff --git a/doc/6.6_re_xhpctf2017_dont_panic.md b/doc/6.6_re_xhpctf2017_dont_panic.md
new file mode 100644
index 0000000..68ab77d
--- /dev/null
+++ b/doc/6.6_re_xhpctf2017_dont_panic.md
@@ -0,0 +1,10 @@
+# 6.6 re xhpctf2017 dont_panic
+
+- [题目解析](#blind-fmt-原理及题目解析)
+- [参考资料](#参考资料)
+
+
+## 题目解析
+
+## 参考资料
+- [Pin Tutorial](http://www.ic.unicamp.br/~rodolfo/mo801/04-PinTutorial.pdf)
diff --git a/doc/6_writeup.md b/doc/6_writeup.md
index 7326414..a0266c1 100644
--- a/doc/6_writeup.md
+++ b/doc/6_writeup.md
@@ -5,3 +5,4 @@
 - [6.3 pwn xdctf2015 pwn200](./6.3_pwn_xdctf2015_pwn200.md)
 - [6.4 pwn njctf2017 233](./6.4_pwn_njctf2017_233.md)
 - [6.5 pwn 0ctf2015 freenote](./6.5_pwn_0ctf2015_freenote.md)
+- [6.6 re xhpctf2017 dont_panic](./6.6_re_xhpctf2017_dont_panic.md)
diff --git a/src/writeup/6.6_re_xhpctf2017_dont_panic/dont_panic b/src/writeup/6.6_re_xhpctf2017_dont_panic/dont_panic
new file mode 100755
index 0000000..321952a
Binary files /dev/null and b/src/writeup/6.6_re_xhpctf2017_dont_panic/dont_panic differ