Hackers tampered with transaction records and order details

First, create a new org.apache.activemq.transport.tcp.TcpTransport class under the current source code directory, and then rewrite the corresponding logic. When the program runs, due to the order of classpath search, the TcpTransport class in the current source code directory will be used first. Next, we exploit the createThrowable method. This is actually similar to the exploitation of PostgreSQL JDBC. Since ActiveMQ comes with Spring-related dependencies, we can use ClassPathXmlApplicationContext to load XML to achieve RCE. Because the o.getClass().getName() method is used to obtain the class name during marshalling, and the getClass method cannot be overridden (final), I also patched org.springframework.context.support.ClassPathXmlApplicationContext here to make it inherit the Throwable class. @chuanfua1