It's here!

​

Info

@Normmatt has created a way to run B9S .firm files from bootrom via a DSi Flashcard and a magnet! This works on every 3DS on any firmware version.

For installation without a PC, user @TheCyberQuake has created a pack which will automatically install B9S and copy over essential starter homebrew from the flashcard's SD to the 3DS's. This will mainly be used for PC-less B9S installations. If you have a PC with you, use 3ds.guide. Read more here: https://gbatemp.net/threads/481141/

How does this work?

This works because of a flaw in the bootrom. Before the bootrom boots the NAND, it checks to see if Start+Select+X is held down, and if the shell is closed. If these requirements are met, it will boot an NDS cartridge from the bootrom. This give that cartridge bootrom access. You might be wondering how you'd hold down buttons while the shell is closed, and why you need a magnet. If you put a magnet in a specific spot on the 3DS, it will go into sleep mode. Using this, you can boot the NDS cartridge with the buttons held down while in sleep mode! Using a reflashable flashcard, you can boot B9SInstaller using the flashcard, and easily install it on your 3DS.

The 2DS doesn't need a magnet since a switch puts it to sleep instead of a magnet.

What does this mean?

1. Any 3DS model on any firmware can be hacked with minimal effort
2. You can unbrick any 3DS model from any type of brick.
   - Remember, you don't need a NAND backup for this. Just do a CTRTransfer.
   - This does not apply to MCU bricks.
3. Even consoles with fried NAND, or even the NAND chip physically removed, can use this

This is incredibly impressive stuff, and will most likely be released soon! edit: now!

FAQ

Q: Can Nintendo patch this?
A: Nope! Not without a new hardware revision.

Q: My flashcard is blocked by my firmware! Can I still use this?
A: Yes! The flashcard blacklist is not enabled on the bootrom.

Q: Why can't this work with my flashcard?
A: The installation requires you to flash NTRBoot to the flashcard's nand. Most DS flashcards, such as the original R4, have a ROM, which is not flashable.

Q: Can I install NTRBoot on my flashcard without another 3DS system?
A: If you can run NDS roms on your 3DS with it, then yes. If it's blocked on your 3DS version, then you'll need another 3DS system to use it.

Q: Will my 3DS flashcard work?
A: No, only the NDSi flashcards listed above.

Q: Will any other flash cards work?
A: Only the ones listed in the OP. However keep in mind that flashcards such as the DSTT, Supercard DS2 and R4 SDHC Dualcore are planned to be supported in the future.

Q: I tried to do this with my cartridge and it didn't work?
A: It doesn't work with regular DS cards.

Q: Can I unbrick from a ____ brick?
A: Considering the card has access to the bootrom, yes! This can unbrick any brick (except MCU), unless you've taken a knife to the motherboard.

Q: Can I install B9S on the latest firmware with this?
A: Again, since the card has access to the bootrom, you can do this easily! Just plug in your flashcard, boot up using the magnet and button combination, and install.

Q: Does this work on the New Nintendo 2DS XL?
A: Yes!

Release
Guide
Free NTRBoot Flashing
Free B9S Installations

Here is SciresM's post about this

Please see SciresM's presentation on bootromhax.​

 

[Deleted member 381889]

We should do the combo every time, right?

I think so, yeah.

 

[Snooli]

Don't quote me on this, but I think we can boot the 3DS completely off of the SDcard, avoiding integrated NAND and all it's issues (fried chip)

 

[Deleted member 381889]

Don't quote me on this, but I think we can boot the 3DS completely off of the SDcard, avoiding integrated NAND and all it's issues (fried chip)

Pretty much

 

[GerbilSoft]

Don't quote me on this, but I think we can boot the 3DS completely off of the SDcard, avoiding integrated NAND and all it's issues (fried chip)

NTR card boot + EmuNAND = no internal NAND access (except for DS(i) and GBA games).

Looks like EmuNAND might make a comeback for this subset of bricked systems.

EDIT: The NAND CID is used for some part of the encryption, so that would need to be bypassed.

 

[nl255]

DSonei is discontinued and it doesn't make any sense to destroy $50 DStwo for that.
Best option would be ak2i or r4i clones if he can get this method working with them.
And btw you can reflash ak2i bootloader by using another ds flashcard, not sure if such method works with r4i cards.

You should be able to reflash the ak2i bootloader from twloader/nds-bootstrap, no flash cart needed. Or worst case you will need to use an arm9 playload (ntrboothax.firm?) to do so since decrypt9 can do it). And hopefully the same will be true of the DSTwo, so no need to destroy it since you can just flash it back. The only question is if he (or someone else) will bother to add support for reflashing the DSTwo back to stock.

--------------------- MERGED ---------------------------

View attachment 88727 this doesn't look to bad?

Yeah, and registered airmail is only $2 more.

 

[ivoyko]

i really cant wait for this... i am here reading this long convo... i dont undestand nothing but who cares i still here.

 

[nl255]

i really cant wait for this... i am here reading this long convo... i dont undestand nothing but who cares i still here.

Do you remember the pandora battery and magic memory stick that made it possible to hack* and unbrick every psp except the 3000/go? This is the same thing but for the 3ds.

*This was before the PS3 was hacked and Sony's PSP signing keys were discovered making it possible to not only hack all PSP systems but also run PSP homebrew on OFW.

 

[jimmyleen]

The 3DS hacking and homebrew scene never ceases to amaze me.

"Patiently waits for switch hacks" Mwahaha!

 

[Deleted User]

"Patiently waits for switch hacks" Mwahaha!

Off topic.

Anyways, won't happen for at least the next 5 seconds because that is how long it took me to right this

 

[proflayton123]

Right, which bricks can this not unbrick? I saw MCU brick CANNOT be doke with this

 

[Deleted User]

Right, which bricks can this not unbrick? I saw MCU brick CANNOT be doke with this

I am pretty sure MCU is the only one. I thought we said earlier that it could be. Which I assumed was true, but I guess not

 

[FR0ZN]

What would / could cause a MCU brick?
Is there a physical way to recover the MCU if not by software?

 

[Deleted member 381889]

I am pretty sure MCU is the only one. I thought we said earlier that it could be. Which I assumed was true, but I guess not

after searching the thread, literally no one said that

 

[ivoyko]

Lia said: ↑
Completely forgot about MCU bricks. They cannot be unbricked with this. Sorry 2.1 N3DSes.
What about us failed-mardmod-BSoD'ers? I'm guessing that counts as fried NAND chip?

Example from a post than i dont understand it but who cares... im here being a spy.

 

[Yepi69]

Ditto with the user above, you did said that MCU bricks cannot be unbricked with this.

 

[Deleted member 381889]

Ditto with the user above, you did said that MCU bricks cannot be unbricked with this.

Nope, search the thread.

--------------------- MERGED ---------------------------

What about us failed-mardmod-BSoD'ers? I'm guessing that counts as fried NAND chip?

Example from a post than i dont understand it but who cares... im here being a spy.

As long as you didn't harm the motherboard, just the nand, that's a nand issue I think

 

[Yepi69]

Nope, search the thread.

--------------------- MERGED ---------------------------


As long as you didn't harm the motherboard, just the nand, that's a nand issue I think

Which is what confused me, in one post you said yes and in a recent one, you said no.

 

[Deleted User]

Is the MCU brick the one where the N3DS is on 2.1?

 

[dpad_5678]

Is the MCU brick the one where the N3DS is on 2.1?

I believe so.

 

[Deleted User]

I believe so.

So, MCU brick is N3DS 2.1...

As long as you haven't taken a knife to your motherboard, yes. Even N3DS 2.1 bricks.