900Mhz Phone Hacking - Part 1
Channel: Foxx D'Gamma
Date: 2017-07-24

In this video I describe the internal exploration of a 900mhz cordless phone to discover the Radio Chip can be "Bus Pirated" and possibly taken control for our own needs. Here we go through the process of digging up as much information as possible via FCC and various datasheets. For those of you following along here is some technical info:

**For technical Information **
FCC ID:AAO4303533:  https://fccid.io/AAO4303533
Schematic: https://fccid.io/AAO4303533/Schematics/schematics-226919.pdf
Internal Photo: https://fccid.io/AAO4303533/Internal-Photos/internal-photo-handset-wo-shield-226960
Block Diagrams: https://fccid.io/AAO4303533/Block-Diagram/block-diagram-226902.pdf
Toshiba TMP86F808 MCU: http://datasheet.octopart.com/TMP86F808DMG(EY)-Toshiba-datasheet-134489.pdf
Toshiba TB31202 Radio PLL: http://pdf1.alldatasheet.com/datasheet-pdf/view/82562/TOSHIBA/TB31202.html