Phone systems have been long forgotten in favor of more modern technology from the legacy that phreakers left us with and they are often neglected. This presentation will cover the types of issues that may be encountered when dealing with phone systems and map them to the relative OWASP category. We'll also cover how to test them, how attackers abuse phone systems and additional methods that can be leveraged in other offensive testing practices.