It's here!

​

Info

@Normmatt has created a way to run B9S .firm files from bootrom via a DSi Flashcard and a magnet! This works on every 3DS on any firmware version.

For installation without a PC, user @TheCyberQuake has created a pack which will automatically install B9S and copy over essential starter homebrew from the flashcard's SD to the 3DS's. This will mainly be used for PC-less B9S installations. If you have a PC with you, use 3ds.guide. Read more here: https://gbatemp.net/threads/481141/

How does this work?

This works because of a flaw in the bootrom. Before the bootrom boots the NAND, it checks to see if Start+Select+X is held down, and if the shell is closed. If these requirements are met, it will boot an NDS cartridge from the bootrom. This give that cartridge bootrom access. You might be wondering how you'd hold down buttons while the shell is closed, and why you need a magnet. If you put a magnet in a specific spot on the 3DS, it will go into sleep mode. Using this, you can boot the NDS cartridge with the buttons held down while in sleep mode! Using a reflashable flashcard, you can boot B9SInstaller using the flashcard, and easily install it on your 3DS.

The 2DS doesn't need a magnet since a switch puts it to sleep instead of a magnet.

What does this mean?

1. Any 3DS model on any firmware can be hacked with minimal effort
2. You can unbrick any 3DS model from any type of brick.
   - Remember, you don't need a NAND backup for this. Just do a CTRTransfer.
   - This does not apply to MCU bricks.
3. Even consoles with fried NAND, or even the NAND chip physically removed, can use this

This is incredibly impressive stuff, and will most likely be released soon! edit: now!

FAQ

Q: Can Nintendo patch this?
A: Nope! Not without a new hardware revision.

Q: My flashcard is blocked by my firmware! Can I still use this?
A: Yes! The flashcard blacklist is not enabled on the bootrom.

Q: Why can't this work with my flashcard?
A: The installation requires you to flash NTRBoot to the flashcard's nand. Most DS flashcards, such as the original R4, have a ROM, which is not flashable.

Q: Can I install NTRBoot on my flashcard without another 3DS system?
A: If you can run NDS roms on your 3DS with it, then yes. If it's blocked on your 3DS version, then you'll need another 3DS system to use it.

Q: Will my 3DS flashcard work?
A: No, only the NDSi flashcards listed above.

Q: Will any other flash cards work?
A: Only the ones listed in the OP. However keep in mind that flashcards such as the DSTT, Supercard DS2 and R4 SDHC Dualcore are planned to be supported in the future.

Q: I tried to do this with my cartridge and it didn't work?
A: It doesn't work with regular DS cards.

Q: Can I unbrick from a ____ brick?
A: Considering the card has access to the bootrom, yes! This can unbrick any brick (except MCU), unless you've taken a knife to the motherboard.

Q: Can I install B9S on the latest firmware with this?
A: Again, since the card has access to the bootrom, you can do this easily! Just plug in your flashcard, boot up using the magnet and button combination, and install.

Q: Does this work on the New Nintendo 2DS XL?
A: Yes!

Release
Guide
Free NTRBoot Flashing
Free B9S Installations

Here is SciresM's post about this

Please see SciresM's presentation on bootromhax.​

 

[annson24]

DON'T REMOVE THE MAGNET! To boot with the flashed card, it's using an SPI firm. The magnet needs to remain the whole time you're installing b9s.

I have to disagree. I've installed b9s to 4 3ds'es already and all I did was do the button combination, power on the device, remove the combination and the magnet, proceed with the installation of b9s. Once the payload within the sdcard has been booted, the magnet and the flashcart isn't needed anymore.

Sent from my SM-G950F using Tapatalk

 

[Xabring]

I have one question since I DON'T have time to read ALL of the post since I have lot's to do, but does Anyone knows if it restores a 3DS that have been bricked by messing on the CTR partition on FBI? thanks beforehand.

 

[annson24]

I have one question since I DON'T have time to read ALL of the post since I have lot's to do, but does Anyone knows if it restores a 3DS that have been bricked by messing on the CTR partition on FBI? thanks beforehand.

It doesn't. It, however, allows you to boot gm9 which you can then do a ctrnand transfer to unbrick your 3ds.

Sent from my SM-G950F using Tapatalk

 

[Xabring]

It doesn't. It, however, allows you to boot gm9 which you can then do a ctrnand transfer to unbrick your 3ds.

Sent from my SM-G950F using Tapatalk

That'll work too!, thank you!

 

[sion_zaphod]

Try restoring the already patched backup that zoogie posted.

Oh here we go again. Last time I did a restore it took ages. But ok i'll try it and will bet anything it still dont work

 

[sion_zaphod]

What a surprise it didn't work.

 

[TheCyberQuake]

Thread is moving too fast to keep up. For those removing the magnet and going to home menu... DON'T REMOVE THE MAGNET! To boot with the flashed card, it's using an SPI firm. The magnet needs to remain the whole time you're installing b9s. Hold the combo, press power, and wait a few seconds. Let go of the buttons, but leave the magnet, and you should see the installer menu. I imagine, the same would apply if you replace the b9s installer with godmode9...

edit: and as stated many times before, leave the sleep switch on, on the O2DS.



Wait, what? Ak2i works with 3ds. I've hacked 3 systems already with mine.

That's completely wrong. What works for me (and gives me 100% boot unless I incorrectly place the magnet) is to place the magnet, hold the power button and button combo for about 3-5 seconds. Release the buttons, but keep the magnet until it boots. Holding the button combo seems to keep it from booting until you release in my experience. I have hacked and re-hacked several consoles and never had to keep the magnet there.

 

[GerbilSoft]

Thread is moving too fast to keep up. For those removing the magnet and going to home menu... DON'T REMOVE THE MAGNET! To boot with the flashed card, it's using an SPI firm. The magnet needs to remain the whole time you're installing b9s. Hold the combo, press power, and wait a few seconds. Let go of the buttons, but leave the magnet, and you should see the installer menu. I imagine, the same would apply if you replace the b9s installer with godmode9...

SPI booting would involve replacing the Wi-Fi flash, not using an NTR cartridge. Also, IIRC Wi-Fi booting has lower precedence than eMMC, whereas NTR booting has higher precedence.

The magnet is only used on startup to tell the Boot ROM to try booting from the NTR cartridge. It doesn't magically reroute the eMMC to Slot-1.

 

[urherenow]

That's completely wrong. What works for me (and gives me 100% boot unless I incorrectly place the magnet) is to place the magnet, hold the power button and button combo for about 3-5 seconds. Release the buttons, but keep the magnet until it boots.

uhh... and how does this make my statement "completely wrong"? My whole point was for people to keep the magnet in place. I have done several consoles myself already and have left the magnet on the whole time. It works that way, every time, so you can't say I'm "completely" wrong
and removing the magnet too soon does cause it to boot normally.

SPI booting would involve replacing the Wi-Fi flash, not using an NTR cartridge. Also, IIRC Wi-Fi booting has lower precedence than eMMC, whereas NTR booting has higher precedence.

The magnet is only used on startup to tell the Boot ROM to try booting from the NTR cartridge. It doesn't magically reroute the eMMC to Slot-1.

If I'm wrong, it's because of a statement in Godmode9: "To build a .firm signed with SPI boot keys (for ntrboothax and the like), run make ntrboot"

 

[AtlasFontaine]

It's possible for this to work with the DSTTi in the future?

 

[Glitchk0ud1001]

I want to try this but i only have a R4 Infinity Dual Core 2013 Bummer u.u

 

[HackerBoy0412]

Is the r4i gold rts from vartis.de the right one?

 

[Snooli]

Is the r4i gold rts from vartis.de the right one?

Yes

 

[Zaphod77]

I wonder how long before we start to see pre-flashed ntrhax flash carts? or ones that have working updaters to make it?

 

[TheCyberQuake]

Quick question:
What's the quickest and easiest way to brick a system using godmode9? I need to brick one of my test systems to do a demonstration and tutorial video set. Probably should PM me a response though so the noobs don't try it.

 

[linuxares]

http://www.shop01media.com/en/Ninte...lash-Carts-linker/recommended-NDS-flash-carts have some flashcarts. I bought from them before and they have never sent any clones. They aren't the cheapest but their support answers almost around the clock.

--------------------- MERGED ---------------------------

Quick question:
What's the quickest and easiest way to brick a system using godmode9? I need to brick one of my test systems to do a demonstration and tutorial video set. Probably should PM me a response though so the noobs don't try it.

Can't you flash a wrong Firmware to it? That should brick it.

 

[Zaphod77]

should be able to brick by deleting important stuff from ctrnand.

 

[Snooli]

Quick question:
What's the quickest and easiest way to brick a system using godmode9? I need to brick one of my test systems to do a demonstration and tutorial video set. Probably should PM me a response though so the noobs don't try it.

Flash N3DS to O3DS or the other way round

--------------------- MERGED ---------------------------

I wonder how long before we start to see pre-flashed ntrhax flash carts? or ones that have working updaters to make it?

Abour 30 pages ago...

 

[TheCyberQuake]

Flash N3DS to O3DS or the other way round

I'm hoping for a faster method that doesn't involve dumping form one console and restoring to another. Perhaps there is a file or folder I can quickly delete?

 

[Cuphat]

I'm hoping for a faster method that doesn't involve dumping form one console and restoring to another. Perhaps there is a file or folder I can quickly delete?

Go to SysNAND Virtual in GodMode9 and edit firm0.bin and firm1.bin and flip some bits around. You'll get a rad blue screen bootrom error.