diff --git a/img/10.png b/img/10.png
new file mode 100644
index 0000000..ba4f1d9
Binary files /dev/null and b/img/10.png differ
diff --git a/img/5.png b/img/5.png
new file mode 100644
index 0000000..2cbfd34
Binary files /dev/null and b/img/5.png differ
diff --git a/img/6.png b/img/6.png
new file mode 100644
index 0000000..98e4e1a
Binary files /dev/null and b/img/6.png differ
diff --git a/img/7.png b/img/7.png
new file mode 100644
index 0000000..f9dc63a
Binary files /dev/null and b/img/7.png differ
diff --git a/img/8.png b/img/8.png
new file mode 100644
index 0000000..ba5c649
Binary files /dev/null and b/img/8.png differ
diff --git a/img/9.png b/img/9.png
new file mode 100644
index 0000000..7914e72
Binary files /dev/null and b/img/9.png differ
diff --git a/zy-极验滑快/2.极验滑块 跟W值1.md b/zy-极验滑快/2.极验滑块 跟W值1.md
index e69de29..41b743b 100644
--- a/zy-极验滑快/2.极验滑块 跟W值1.md	
+++ b/zy-极验滑快/2.极验滑块 跟W值1.md	
@@ -0,0 +1,15 @@
+## 寻找w的参数
+
+滑动错误的时候也会生成w参数，这就可以进行调试w
+
+![debugger](../img/8.png)
+
+打断点调试，发现src中带有w的密文信息
+
+![debugger](../img/9.png)
+
+继续跟踪栈，找到栈的头部信息， 发现传入的s中带有w的密文信息
+
+![debugger](../img/10.png)
+
+