BiosToolCommonDriver.sys is an AMD RPMC (Replay Protected Monotonic Counter) field fusing utility driver that exposes 18 IOCTLs including arbitrary physical memory read/write via MmMapIoSpace, unrestricted port I/O, PCI configuration space read/write, MSR read/write (wrmsr/rdmsr), SPI flash read, CPUID execution, virtual-to-physical address translation via MmGetPhysicalAddress, and contiguous memory allocation. WHQL Microsoft-signed and also AMD Sectigo dual-signed. Ships inside Razer Blade 1...
sc.exe create BiosToolCommonDriver binPath=C:\windows\temp\BiosToolCommonDriver.sys type=kernel && sc.exe start BiosToolCommonDriversc.exe create BiosToolCommonDriver binPath=C:\windows\temp\BiosToolCommonDriver.sys type=kernel && sc.exe start BiosToolCommonDriverSandbox: execFile · Timeout: 30s
security.privilegeescalation.kernel-exploit examples:
BiosToolCommonDriver.sys is an AMD RPMC (Replay Protected Monotonic Counter) field fusing utility driver that exposes 18 IOCTLs including arbitrary physical memory read/write via MmMapIoSpace, unrestricted port I/O, PCI configuration space read/write, MSR read/write (wrmsr/rdmsr), SPI flash read, CPUID execution, virtual-to-physical address translation via MmGetPhysicalAddress, and contiguous memory allocation. WHQL Microsoft-signed and also AMD Sectigo dual-signed. Ships inside Razer Blade 16 BIOS update packages and ASUS firmware config bundles. PDB path confirms AMD internal build origin.
Use Case: Elevate privileges
Required Privileges: kernel
MITRE ATT&CK: T1068