From ActiveMQ to Godzilla webshell