Table of Contents
Desk and IP Phones
Desk phones for the purpose of communicating within or outside of a business environment; usually found in offices. Many of these are not EOP capable, but many of them have little screens which are able of doing several things. Some of these phones require little work to do this, and they are usually Android + ARM based systems. However, phones which require some exploits are more commonly Linux + ARM instead.
CaptionCall 67TB
Operating Systems (i.MX6 ARMv7 SoC)
Debian (chroot, +Doom)
wrangled fbdev, mesa, and evdev to load IceWM on the screen with touchscreen + keypad
This also runs DOOM. In essence, a fully contained ARM Debian computer, with 4GB NAND and 1GB DDR3 is contained within this phone, considering the successful IceWM. Bluetooth and audio also work, and it could be possible to link it to an intranet through the phone connection. All in all, a very interesting hack. The phones are cheap too (~$25). Creator is working on mainline kernel support for this device!
https://github.com/joshumax/dumping-ground/tree/master/bonanza_hacks
https://joshumax.github.io/general/2021/08/11/running-doom-on-captioncall.html
https://hackaday.com/2021/08/13/doom-on-a-desk-phone-is-just-the-tip-of-the-iceburg/
Cisco brand
Operating Systems (ARM?)
Android
These pretty much all run Android, complete with apps, web browser access, and more.
General
Operating Systems (ARM?)
Android
Just a few VoIP phones that run Android, for later reference.
https://www.voipsupply.com/blog/voip-insider/5-best-android-based-voip-phones/
Grandstream series
Operating Systems (ARM?)
Android
For $150? Try getting Cisco. $850 can get you a color touch screen; don't expect camera or apps
Witnessed on both the GXV3240 and GXV3275 models. It is assumed that other models of this GXV3xxx, or even GXV range are capable of running Android. Functions are quite comprehensive, even including a web browser. Apparently, the GXV3240 has 825MB RAM, 1GB NAND, and ports for both SD and HDMI.
http://i.imgur.com/r1GE3Er.jpg (3275)
https://www.reddit.com/r/mildlyinteresting/comments/2h9rrv/my_office_desk_phone_runs_android/ (3240)
https://www.neobits.com/grandstream_gxv3140_poe_gxv3140_ip_multimedia_p6031249.html
Ooma Telo
Operating Systems
Root access
You now have SSH access to the unit. root password is !ooma123
Through a bug in the Webapp for this device, it is possible to ssh into these devices as root. Further capability is unknown.
Polycom (VVX 4xx?)
Other
DOOM port
Can be controlled with the front keypads. Takes advantage of a firmware bug relating to relative paths in code, which allows the creation of directories and moving of files. These run Linux so once you're there, things unveil themselves.
https://neilbostian.github.io/#/doomphone