There are two types of methods to generate our CAPTCHAs with adversarial examples, which one is FGSM(Fast Gradient Sign Method), and another is UAPM(Universal Adversarial Perturbation Method). We used a piecewise compression method to compress the data.Each folder is a method of training set or test set