diff --git a/.github/workflows/web.param.yml b/.github/workflows/web.param.yml
new file mode 100644
index 0000000..541b96b
--- /dev/null
+++ b/.github/workflows/web.param.yml
@@ -0,0 +1,50 @@
+name: Challenge Param 
+
+on:
+  push:
+    branches: ["main"]
+    paths:
+      - "!**/README.md"
+      - "challenges/web/param/build/**"
+  workflow_dispatch:
+
+env:
+  TYPE: web
+  NAME: param
+  REGISTRY: ghcr.io
+
+jobs:
+  challenge-build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to the Container registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata (tags, labels) for Docker
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.REGISTRY }}/${{ github.repository }}/${{ env.NAME }}
+          tags: |
+            latest
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v4
+        with:
+          context: challenges/${{ env.TYPE }}/${{ env.NAME }}/build
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          push: true
diff --git a/challenges/web/param/README.md b/challenges/web/param/README.md
new file mode 100644
index 0000000..e068034
--- /dev/null
+++ b/challenges/web/param/README.md
@@ -0,0 +1,16 @@
+# Param
+
+- 作者：-
+- 参考：-
+- 难度：Baby
+- 分类：Web
+- 镜像：-
+- 端口：-
+
+## 题目描述
+
+<description>
+
+## 题目解析
+
+<analysis>
diff --git a/challenges/web/param/build/html/index.php b/challenges/web/param/build/html/index.php
new file mode 100644
index 0000000..c5fc2f9
--- /dev/null
+++ b/challenges/web/param/build/html/index.php
@@ -0,0 +1,19 @@
+<?php
+
+$getParam = $_GET['svu'];
+$postParam = $_POST['ctf'];
+
+if (isset($getParam) && isset($postParam)) {
+    if ($getParam === "a") {
+        echo ("POST 方式上传参数 ctf，值为 b");
+        if ($postParam === "b") {
+            echo file_get_contents("/flag");
+        } else {
+            echo ("POST 参数错误!");
+        }
+    } else {
+        echo ("GET 参数错误!");
+    }
+} else {
+    echo ("GET 方式上传参数 svu，值为 a");
+}