It's here!

​

Info

@Normmatt has created a way to run B9S .firm files from bootrom via a DSi Flashcard and a magnet! This works on every 3DS on any firmware version.

For installation without a PC, user @TheCyberQuake has created a pack which will automatically install B9S and copy over essential starter homebrew from the flashcard's SD to the 3DS's. This will mainly be used for PC-less B9S installations. If you have a PC with you, use 3ds.guide. Read more here: https://gbatemp.net/threads/481141/

How does this work?

This works because of a flaw in the bootrom. Before the bootrom boots the NAND, it checks to see if Start+Select+X is held down, and if the shell is closed. If these requirements are met, it will boot an NDS cartridge from the bootrom. This give that cartridge bootrom access. You might be wondering how you'd hold down buttons while the shell is closed, and why you need a magnet. If you put a magnet in a specific spot on the 3DS, it will go into sleep mode. Using this, you can boot the NDS cartridge with the buttons held down while in sleep mode! Using a reflashable flashcard, you can boot B9SInstaller using the flashcard, and easily install it on your 3DS.

The 2DS doesn't need a magnet since a switch puts it to sleep instead of a magnet.

What does this mean?

1. Any 3DS model on any firmware can be hacked with minimal effort
2. You can unbrick any 3DS model from any type of brick.
   - Remember, you don't need a NAND backup for this. Just do a CTRTransfer.
   - This does not apply to MCU bricks.
3. Even consoles with fried NAND, or even the NAND chip physically removed, can use this

This is incredibly impressive stuff, and will most likely be released soon! edit: now!

FAQ

Q: Can Nintendo patch this?
A: Nope! Not without a new hardware revision.

Q: My flashcard is blocked by my firmware! Can I still use this?
A: Yes! The flashcard blacklist is not enabled on the bootrom.

Q: Why can't this work with my flashcard?
A: The installation requires you to flash NTRBoot to the flashcard's nand. Most DS flashcards, such as the original R4, have a ROM, which is not flashable.

Q: Can I install NTRBoot on my flashcard without another 3DS system?
A: If you can run NDS roms on your 3DS with it, then yes. If it's blocked on your 3DS version, then you'll need another 3DS system to use it.

Q: Will my 3DS flashcard work?
A: No, only the NDSi flashcards listed above.

Q: Will any other flash cards work?
A: Only the ones listed in the OP. However keep in mind that flashcards such as the DSTT, Supercard DS2 and R4 SDHC Dualcore are planned to be supported in the future.

Q: I tried to do this with my cartridge and it didn't work?
A: It doesn't work with regular DS cards.

Q: Can I unbrick from a ____ brick?
A: Considering the card has access to the bootrom, yes! This can unbrick any brick (except MCU), unless you've taken a knife to the motherboard.

Q: Can I install B9S on the latest firmware with this?
A: Again, since the card has access to the bootrom, you can do this easily! Just plug in your flashcard, boot up using the magnet and button combination, and install.

Q: Does this work on the New Nintendo 2DS XL?
A: Yes!

Release
Guide
Free NTRBoot Flashing
Free B9S Installations

Here is SciresM's post about this

Please see SciresM's presentation on bootromhax.​

 

[GerbilSoft]

I'm on this step, and I do not see "ntrboot_flasher" on the selection screen of Luma3DS.
View attachment 95625

Did you copy ntrboot_flasher.firm from https://github.com/kitling/ntrboot_flasher/releases to sd:/luma/payloads/ ?

 

[.Chris]

Did you copy ntrboot_flasher.firm from https://github.com/kitling/ntrboot_flasher/releases to sd:/luma/payloads/ ?

Yup.

 

[TheCyberQuake]

All you really need is an AK2i (with its microSD inserted, containing needed 3DS files as well), a magnet (unless target is O2DS), a microSD -> SD card adapter (if target system uses a full-sized SD card), and a screwdriver (for N3DSXL/N3DS targets only).

Take the microSD out of the Acekard and insert it into the target system, insert Acekard and trigger ntrboot B9S to install B9S to the system, then use Luma to chainload GodMode9. Copy the necessary files from the SD to RAMDRIVE, unmount SD and replace it with target's original SD, copy files from RAMDRIVE to SD. Done. Retrieve your stuff for usage next time.

I've got everything I need (except the screwdriver) in my 3DS and its grip:

Spoiler

I didn't even realize gm9 had a ramdrive. Now I only need a micro SD adapter, my ak2i, a screwdriver for n3ds and a magnet. I can have some random stranger set up with cfw in under 10 minutes. If that doesn't testify to how hacked the 3ds is at this point I don't know what does.

 

[TheCyberQuake]

Yup. View attachment 95626

You have a9lh. You need b9s to run this (or a ds/dsl for ak2i)

 

[ichidansan]

There's approximately 9 billion different types of flashcarts that call themselves R4i, you'll have to be more specific.

it literally looks exactly like the one in OP without the RTS, heres a pic.

 

[.Chris]

You have a9lh. You need b9s to run this (or a ds/dsl for ak2i)

Ah I see, thank you for the clarification. I'm borrowing my brother's n3DS, and I just assumed that he's on b9s.

 

[Cuphat]

it literally looks exactly like the one in OP without the RTS, heres a pic.

Try it. If ntrboot_flasher detects it as a supported card, it'll work.

--------------------- MERGED ---------------------------

Yup. View attachment 95626

https://3ds.guide/a9lh-to-b9s

 

[fmhugo]

somebody have lastet Acekard 2i HW-81 backup ?

 

[zoogie]

somebody have lastet Acekard 2i HW-81 backup ?

There's quite a few floating around but here's mine.
https://gbatemp.net/threads/full-ntrboothax-instructions.480588/page-4#post-7510161

 

[fmhugo]

There's quite a few floating around but here's mine.
https://gbatemp.net/threads/full-ntrboothax-instructions.480588/page-4#post-7510161

Thanks

 

[Adeka]

getting those r4 sdhc dual core year cards working are going to be a nightmare on the devs.

If I recall there's 3 different models of the cards. 1 that uses wood and 2 running r4. then the amount of clones the cards have are insane!

 

[nl255]

You have a9lh. You need b9s to run this (or a ds/dsl for ak2i)

They released a .nds format installer? When?

 

[Cuphat]

They released a .nds format installer? When?

https://github.com/d3m3vilurr/ak2i_ntrcardhax_flasher

 

[nl255]

https://github.com/d3m3vilurr/ak2i_ntrcardhax_flasher

I wonder if it works on the 3ds using twloader/nds-bootstrap.

 

[WebW]

All you really need is an AK2i (with its microSD inserted, containing needed 3DS files as well), a magnet (unless target is O2DS), a microSD -> SD card adapter (if target system uses a full-sized SD card), and a screwdriver (for N3DSXL/N3DS targets only).

Take the microSD out of the Acekard and insert it into the target system, insert Acekard and trigger ntrboot B9S to install B9S to the system, then use Luma to chainload GodMode9. Copy the necessary files from the SD to RAMDRIVE, unmount SD and replace it with target's original SD, copy files from RAMDRIVE to SD. Done. Retrieve your stuff for usage next time.

This is a great idea! Maybe it can be simplified by scripting the manual actions in Godmode9. Like this:

1. Automatically copy files from SD card to ramdrive
2. Ask the user to unmount the SD card and insert the target's original SD card (is it possible to activate the software eject function through scripting?)
3. Copy files from ramdrive to target SD card after confirmation from the user (meaning: I replaced the SD card with the target SD card)

I'm not familiar with the GM9 scripting language (yet) so I can't tell if the second step would be possible.

Edit: Unfortunately a command to activate the software eject function is not available at the moment.

 

[Snooli]

I wonder if it works on the 3ds using twloader/nds-bootstrap.

No TWL runs NDSes as a DSi, same as normal NTR cards in 3DS. You need the original NDS(L) for it to work. I don't know however, ehy you would want to go this route, if your cnsole is already shacked.

 

[nl255]

No TWL runs NDSes as a DSi, same as normal NTR cards in 3DS. You need the original NDS(L) for it to work. I don't know however, ehy you would want to go this route, if your cnsole is already shacked.

From what I understand the only reason it doesn't work on a DSi is due to the need for cart swapping. I know that people have unbricked certain DS flash carts by using the 3DS's SD card as the "second flash cart" to run the updater from.

 

[Snooli]

From what I understand the only reason it doesn't work on a DSi is due to the need for cart swapping. I know that people have unbricked certain DS flash carts by using the 3DS's SD card as the "second flash cart" to run the updater from.

Still, you might as well save yourself the trouble and just godmode it since you have a shacked console.

 

[leon315]

I have both GW blue card and DSTWO card, are they compatible with this mighty hack??? Even I have already cfw installed on my o3ds...

 

[Urbanshadow]

Has anyone tested to boot with lid closed and a button card instead of magnet? (one that presses X+start+select when the lid is closed)