Cookie-gated PHP webshells use obfuscation, php-fpm execution, and cron-based persistence to evade detection in Linux hosting ...
Your phone is more capable than Android lets on.
Whatever you do, ignore these mistakes, myths, and misunderstandings.