It's here!

​

Info

@Normmatt has created a way to run B9S .firm files from bootrom via a DSi Flashcard and a magnet! This works on every 3DS on any firmware version.

For installation without a PC, user @TheCyberQuake has created a pack which will automatically install B9S and copy over essential starter homebrew from the flashcard's SD to the 3DS's. This will mainly be used for PC-less B9S installations. If you have a PC with you, use 3ds.guide. Read more here: https://gbatemp.net/threads/481141/

How does this work?

This works because of a flaw in the bootrom. Before the bootrom boots the NAND, it checks to see if Start+Select+X is held down, and if the shell is closed. If these requirements are met, it will boot an NDS cartridge from the bootrom. This give that cartridge bootrom access. You might be wondering how you'd hold down buttons while the shell is closed, and why you need a magnet. If you put a magnet in a specific spot on the 3DS, it will go into sleep mode. Using this, you can boot the NDS cartridge with the buttons held down while in sleep mode! Using a reflashable flashcard, you can boot B9SInstaller using the flashcard, and easily install it on your 3DS.

The 2DS doesn't need a magnet since a switch puts it to sleep instead of a magnet.

What does this mean?

1. Any 3DS model on any firmware can be hacked with minimal effort
2. You can unbrick any 3DS model from any type of brick.
   - Remember, you don't need a NAND backup for this. Just do a CTRTransfer.
   - This does not apply to MCU bricks.
3. Even consoles with fried NAND, or even the NAND chip physically removed, can use this

This is incredibly impressive stuff, and will most likely be released soon! edit: now!

FAQ

Q: Can Nintendo patch this?
A: Nope! Not without a new hardware revision.

Q: My flashcard is blocked by my firmware! Can I still use this?
A: Yes! The flashcard blacklist is not enabled on the bootrom.

Q: Why can't this work with my flashcard?
A: The installation requires you to flash NTRBoot to the flashcard's nand. Most DS flashcards, such as the original R4, have a ROM, which is not flashable.

Q: Can I install NTRBoot on my flashcard without another 3DS system?
A: If you can run NDS roms on your 3DS with it, then yes. If it's blocked on your 3DS version, then you'll need another 3DS system to use it.

Q: Will my 3DS flashcard work?
A: No, only the NDSi flashcards listed above.

Q: Will any other flash cards work?
A: Only the ones listed in the OP. However keep in mind that flashcards such as the DSTT, Supercard DS2 and R4 SDHC Dualcore are planned to be supported in the future.

Q: I tried to do this with my cartridge and it didn't work?
A: It doesn't work with regular DS cards.

Q: Can I unbrick from a ____ brick?
A: Considering the card has access to the bootrom, yes! This can unbrick any brick (except MCU), unless you've taken a knife to the motherboard.

Q: Can I install B9S on the latest firmware with this?
A: Again, since the card has access to the bootrom, you can do this easily! Just plug in your flashcard, boot up using the magnet and button combination, and install.

Q: Does this work on the New Nintendo 2DS XL?
A: Yes!

Release
Guide
Free NTRBoot Flashing
Free B9S Installations

Here is SciresM's post about this

Please see SciresM's presentation on bootromhax.​

 

[Hakujou]

Can you use those free Real Estate Agent Magnets that come in the mail? (fingers and toes crossed...)

Sent from my SM-G955F using Tapatalk

Try it. Just put the magnet close to your ABXY buttons while the 3DS is on. If it goes to sleep, it'll work.

 

[W4T4R1]

Can you use those free Real Estate Agent Magnets that come in the mail? (fingers and toes crossed...)

Sent from my SM-G955F using Tapatalk

If they are too thin and weak, they won't work (I don't know how those magnets you mentioned are).
I have a Star Wars magnet which is 2 millimetres thin (probably less) and it doesnt' work.
I solved by buying a magnetic curtain holder from a local chinese store at 1€, ripped off the magnet and it works flawlessly

 

[Deleted member 350372]

Yep

Well, this is odd... I can't seem to find the download for unbanmii using FBI or searching for it on Google & GitHub. Installing FBI gives me a bad data error code. So when I checked to see if it was on GitHub, I had a thought that it might've been taken down for some reason. Maybe due to the rumors of it being malware? I have a spare 3ds console with B9S+Luma3DS 8.1.1 that I don't use anymore that I transferred a long time ago, so I can mess with that console knowing what I am doing without doing anything risky to my main N3DS console I use all the time.

UPDATE: Can someone delete this post? I can't delete it myself unfortunately.

 

[Olmectron]

Well, this is odd... I can't seem to find the download for unbanmii using FBI or searching for it on Google & GitHub. Installing FBI gives me a bad data error code. So when I checked to see if it was on GitHub, I had a thought that it might've been taken down for some reason. Maybe due to the rumors of it being malware? I have a spare 3ds console with B9S+Luma3DS 8.1.1 that I don't use anymore that I transferred a long time ago, so I can mess with that console knowing what I am doing without doing anything risky to my main N3DS console I use all the time.

Not sure why you post that here.

Anyway, those weren't "rumors", those are facts, confirmed by SciresM. UnbanMii steals your console's unique info.

 

[Deleted member 350372]

Not sure why you post that here.

Anyway, those weren't "rumors", those are facts, confirmed by SciresM. UnbanMii steals your console's unique info.

Hmm okay. I see. Glad I didn't use it on my main console then. I'm going to delete my previous post then as it is unrelated and useless now.

 

[ivoyko]

And people its talking about another stuff than isnt Magnethax here because....

 

[spinal_cord]

I just want the list of ds flash carts with re-writable firmware, so I can replace firmware with homebrew games.

 

[Olmectron]

And people its talking about another stuff than isnt Magnethax here because....

I tried not to go off-topic. Note the "Not sure why you post that here." line I wrote.

Just answered his question so the thread can continue clean without someone else with the same question posting a "me too!".

 

[Deleted member 350372]

And people its talking about another stuff than isnt Magnethax here because....

For me, I made a mistake, and I asked if a moderator can kindly delete my post since it is off topic. Idk why others do it tho.

 

[democracy]

what about those abc and 123 magnets, do those work?

Sent from my SM-G955F using Tapatalk

 

[Akira]

Someone already made their own version of magnethax working.

Huge shout-out to @d3m3vilurr who got a PoC for ntrboot working all on his own! We're hoping to work together to get this out the door soon™ https://t.co/tAYVTDcBqC

— hedge (@hedgeberg) August 11, 2017

 

[Axorve]

Someone already made their own version of magnethax working.

https://twitter.com/hedgeberg/status/896015349556162560

Beta tester ?

 

[astronautlevel]

Beta tester ?

No, d3m3 wrote it from scratch on his own.

 

[Axorve]

No, d3m3 wrote it from scratch on his own.

Nice

 

[laharl22]

Nice

I hope its release soon i have a o3ds bricked

 

[Axorve]

I hope its release soon i have a o3ds bricked

Me too, N3DS from my brother is bricked, i have a lot of dump, but no hardmode ^^

But, vacance is soon over :/

 

[Quantumcat]

No, d3m3 wrote it from scratch on his own.

My prediction might just come true. This is like when everyone was waiting and waiting in the Wii U scene for what Team Salt promised, then eventually got sick of it and we had the Brazilian method followed quickly by redNAND, Mocha and Haxchi (people starting from scratch and producing something similar to what was promised and never delivered).

 

[TheCyberQuake]

My prediction might just come true. This is like when everyone was waiting and waiting in the Wii U scene for what Team Salt promised, then eventually got sick of it and we had the Brazilian method followed quickly by redNAND, Mocha and Haxchi (people starting from scratch and producing something similar to what was promised and never delivered).

I wasn't too upset that it was taking a while because in my mind they were polishing things up and making everything work really well. But then we got the rushed exploits out and then they just stopped caring. And the thing that upset me most was when they were saying "oh we never said we were going to release anything publicly". Like gtfo don't string an entire userbase along with progress updates and then not release it. If you don't plan on releasing it at all, don't even notify the general public and especially don't give a bunch of updates as if you plan on releasing to the public at some point.

 

[The Catboy]

My prediction might just come true. This is like when everyone was waiting and waiting in the Wii U scene for what Team Salt promised, then eventually got sick of it and we had the Brazilian method followed quickly by redNAND, Mocha and Haxchi (people starting from scratch and producing something similar to what was promised and never delivered).

Moral of the story, if you want something done right, do it yourself.

 

[Quantumcat]

It's basically the same thing that happened with B9S as well.
Moral of the story, if you want something done right, do it yourself.

Are you sure? Who promised B9S originally? And when it was "announced" at 33c3 it was only mentioned as an idea, rather than "I'm developing this for you right now".