Wow my mind is blown. Can you provide a sketch of how you did it so I can learn from this experience? Was the vulnerability due to uploading files? What workflow did you use to deploy straight from your phone?