It's here!

​

Info

@Normmatt has created a way to run B9S .firm files from bootrom via a DSi Flashcard and a magnet! This works on every 3DS on any firmware version.

For installation without a PC, user @TheCyberQuake has created a pack which will automatically install B9S and copy over essential starter homebrew from the flashcard's SD to the 3DS's. This will mainly be used for PC-less B9S installations. If you have a PC with you, use 3ds.guide. Read more here: https://gbatemp.net/threads/481141/

How does this work?

This works because of a flaw in the bootrom. Before the bootrom boots the NAND, it checks to see if Start+Select+X is held down, and if the shell is closed. If these requirements are met, it will boot an NDS cartridge from the bootrom. This give that cartridge bootrom access. You might be wondering how you'd hold down buttons while the shell is closed, and why you need a magnet. If you put a magnet in a specific spot on the 3DS, it will go into sleep mode. Using this, you can boot the NDS cartridge with the buttons held down while in sleep mode! Using a reflashable flashcard, you can boot B9SInstaller using the flashcard, and easily install it on your 3DS.

The 2DS doesn't need a magnet since a switch puts it to sleep instead of a magnet.

What does this mean?

1. Any 3DS model on any firmware can be hacked with minimal effort
2. You can unbrick any 3DS model from any type of brick.
   - Remember, you don't need a NAND backup for this. Just do a CTRTransfer.
   - This does not apply to MCU bricks.
3. Even consoles with fried NAND, or even the NAND chip physically removed, can use this

This is incredibly impressive stuff, and will most likely be released soon! edit: now!

FAQ

Q: Can Nintendo patch this?
A: Nope! Not without a new hardware revision.

Q: My flashcard is blocked by my firmware! Can I still use this?
A: Yes! The flashcard blacklist is not enabled on the bootrom.

Q: Why can't this work with my flashcard?
A: The installation requires you to flash NTRBoot to the flashcard's nand. Most DS flashcards, such as the original R4, have a ROM, which is not flashable.

Q: Can I install NTRBoot on my flashcard without another 3DS system?
A: If you can run NDS roms on your 3DS with it, then yes. If it's blocked on your 3DS version, then you'll need another 3DS system to use it.

Q: Will my 3DS flashcard work?
A: No, only the NDSi flashcards listed above.

Q: Will any other flash cards work?
A: Only the ones listed in the OP. However keep in mind that flashcards such as the DSTT, Supercard DS2 and R4 SDHC Dualcore are planned to be supported in the future.

Q: I tried to do this with my cartridge and it didn't work?
A: It doesn't work with regular DS cards.

Q: Can I unbrick from a ____ brick?
A: Considering the card has access to the bootrom, yes! This can unbrick any brick (except MCU), unless you've taken a knife to the motherboard.

Q: Can I install B9S on the latest firmware with this?
A: Again, since the card has access to the bootrom, you can do this easily! Just plug in your flashcard, boot up using the magnet and button combination, and install.

Q: Does this work on the New Nintendo 2DS XL?
A: Yes!

Release
Guide
Free NTRBoot Flashing
Free B9S Installations

Here is SciresM's post about this

Please see SciresM's presentation on bootromhax.​

 

[busmanl30]

So does the .com.cn variant of the r4 dual core 2017 work ? Some say just .com and others say that .com.cn also works. Anyone know anything?

Yes it does

 

[Redirr]

Well now it's become perfect.

The cheapest and easy R4 to be found here it's working perfect. it's cost almos $5

 

[PolskiWisnia]

The new ak2i 3.3 flasher now gives me "Flashcard setup failed" on both DS Lite and 3DS. I hope they'll fix it ;(

 

[Modular511]

whats the cheapest card confirmed working? Also what has fastest shipping within usa?

 

[MrJason005]

whats the cheapest card confirmed working? Also what has fastest shipping within usa?

http://nds-card.com/ProShow.asp?ProID=149

However, if a new .NDS flasher is released (that works), this will be the cheapest:
http://nds-card.com/ProShow.asp?ProID=490

 

[busmanl30]

http://nds-card.com/ProShow.asp?ProID=149

However, if a new .NDS flasher is released (that works), this will be the cheapest:
http://nds-card.com/ProShow.asp?ProID=490

Your wrong the dual core 2017 will be the cheapest

 

[Modular511]

http://nds-card.com/ProShow.asp?ProID=149

However, if a new .NDS flasher is released (that works), this will be the cheapest:
http://nds-card.com/ProShow.asp?ProID=490

That sucks, I got the $20 one for ds mode last year and I lost it while moving. Never would have guessed that I would be using it to unbrick. Haha.

 

[MrJason005]

Your wrong the dual core 2017 will be the cheapest

Well 1 dollar difference :\

 

[Nomelas]

I was bored the other day and decided to sort out making a build of GodMode9 you can flash to an R4i Gold 3DS RTS that will allow any 3DS to be hacked in seconds without needing to remove the SD card- including almost every homebrew you'd need.

When compiling GodMode9, it supports including a mountable image in vram (in my case a romfs built with 3dstool) of up to 3MB, you can also include an aeskeydb and a *.gm9 script that you can have run immediately when GM9 boots.

Unfortunately the R4i Gold 3DS RTS won't boot ntrboot payloads of about 1.4MiB, so I had to get clever.
Thanks to @AnalogMan for helping me with the idea to use multiupdater and for knowing the max size of the GodMode9 payload for this flashcart.

These things combined allowed me to craft a godmode9 ntrboot flashable payload that contains:

• Boot9Strap 1.3 (installed by the script, no need for safeb9sinstaller or anything)
  
• Luma 3DS 8.1.1 (copied to both NAND and SD card by script)
• config.bin for Luma 3DS (hand-made by myself to point at Activity Log for HBL, as well as turn on 4 configuration settings I use)
• boot.3dsx (A copy of multiupdater 3.2.1, dropped on the root of the Sd where HBL usually goes)
• config.json (A configuration for that multiupdater that downloads a file I've uploaded to the internet, and replaces itself with it.)

The item I uploaded to the internet is ZIP3DSFX by d0k3 with an archive full of homebrew and payloads. When extracting the zip, the homebrew launcher will replace the ZIP3DSFX 3dsx and the multiupdater config, leaving no traces of extra junk on the SD card from that process, after the zip3dsfx finishes extracting, it'll exit to the newly dropped homebrew launcher, leaving you to any additional operations you want to perform.

The end all be all is this, any online 3DS can be hacked completely in a bit over a minute using just the flashcart and magnet with only a handful of user inputs needed.

I might make a detailed tutorial on how to do this sometime later maybe, the process for setting this up yourself is rather complex if you're a noob since you need to have devkitpro, firmtool, and a few other things installed in order to build homebrew, which is very much required here.

if you could create a guide or some pointer for how to set this up, that would be awesome.

 

[Redirr]

However, if a new .NDS flasher is released (that works), this will be the cheapest:
http://nds-card.com/ProShow.asp?ProID=490

Lol. Here its cost $5.

 

[bladerx]

One question, if your 3ds is modded what happens if you try ntrboot? I wan´t to try the flashcart to see if it works to help people over here.

 

[zoogie]

One question, if your 3ds is modded what happens if you try ntrboot? I wan´t to try the flashcart to see if it works to help people over here.

ntrboot executes before any of your mods can load, so it really doesn't affect ntrboot's execution.
the only issue is that the standard release of ntrboothax here
https://github.com/SciresM/boot9strap/releases/download/1.3/boot9strap-1.3-ntr.zip
loads "boot.firm". This is an issue because a modded system does the same thing so its difficult to tell if ntrboot launched boot.firm or if it was your cfw.

You can test if ntrboot is actually working on your modded system by either installing something else like godmode9 to the flashcard (check the release archive under the "ntrboot" folder) or installing a boot9strap fork that loads from ntrboot.firm on the sd card. That can be found here
https://github.com/al3x10m/boot9strap/files/1294179/1.3.load.ntrboot.firm.zip

 

[bladerx]

ntrboot executes before any of your mods can load, so it really doesn't affect ntrboot's execution.
the only issue is that the standard release of ntrboothax here
https://github.com/SciresM/boot9strap/releases/download/1.3/boot9strap-1.3-ntr.zip
loads "boot.firm". This is an issue because a modded system does the same thing so its difficult to tell if ntrboot launched boot.firm or if it was your cfw.

You can test if ntrboot is actually working on your modded system by either installing something else like godmode9 to the flashcard (check the release archive under the "ntrboot" folder) or installing a boot9strap fork that loads from ntrboot.firm on the sd card. That can be found here
https://github.com/al3x10m/boot9strap/files/1294179/1.3.load.ntrboot.firm.zip

Thanks, I will try that.

 

[MrJason005]

Just a PSA for anyone who is looking to use their SDHC flashcart for NTRBoot:

A .nds flasher was released, that seems to be working but it's for NDS only. You can't do single system with this.
This is useful for whoever has a DS lite, a SDHC flashcart and an unhacked 3DS.

Here's the direct download link:
https://github.com/figgyc/ak2i_ntrc...ownload/v3.2-beta/ak2i_ntrcardhax_flasher.nds

 

[CheatFreak47]

if you could create a guide or some pointer for how to set this up, that would be awesome.

I ended up making a "how to" thread for how I accomplished this too, though I must warn you, the guide I wrote assumes more of the user than many other guides do. You need enough computer knowledge to work with command line programs or use a terminal window to do this since it involves actually compiling software from the source.

 

[Eliot15]

Hey guys is there a guide how to compile?

 

[PolskiWisnia]

Just a PSA for anyone who is looking to use their SDHC flashcart for NTRBoot:

A .nds flasher was released, that seems to be working but it's for NDS only. You can't do single system with this.
This is useful for whoever has a DS lite, a SDHC flashcart and an unhacked 3DS.

Here's the direct download link:
https://github.com/figgyc/ak2i_ntrc...ownload/v3.2-beta/ak2i_ntrcardhax_flasher.nds

Thank you, my SDHC DualCore 2015 worked fine. I'll test it with 3DS tommorow.

 

[MrJason005]

Thank you, my SDHC DualCore 2015 worked fine. I'll test it with 3DS tommorow.

This flasher will not work on a DSi or a 3DS.

 

[PolskiWisnia]

This flasher will not work on a DSi or a 3DS.

I meant test ntrboot flashed flashcard.

 

[alphaplayer]

Not working with that R4 SDHC Gold Pro 2017 r4isdhc.com... Any ideas about how to fix it? The problem is "flashcart setup failed". I should exchange it for an Acekard or wait to the support?

Thank you guys!