diff --git a/README.md b/README.md
index 2161cc3..13b843b 100644
--- a/README.md
+++ b/README.md
@@ -630,6 +630,7 @@
 -  [简单的源码免杀过av](./books/简单的源码免杀过av.pdf)
 -  [duomicms代码审计](./books/duomicms代码审计.pdf)
 -  [劫持got表绕过disable_functions](./books/劫持got表绕过disable_functions.pdf)-[原文地址](https://mp.weixin.qq.com/s/NDkDc7j5rFbcHWTM26zeGQ)
+-  [【代码审计】xyhcms3.5后台任意文件读取](./books/[代码审计]xyhcms3.5后台任意文件读取.pdf)
 
 
 ## <span id="head9"> 说明</span>
diff --git a/books/【代码审计】xyhcms3.5后台任意文件读取.pdf b/books/【代码审计】xyhcms3.5后台任意文件读取.pdf
new file mode 100644
index 0000000..ca5ba3c
Binary files /dev/null and b/books/【代码审计】xyhcms3.5后台任意文件读取.pdf differ