It's here!

​

Info

@Normmatt has created a way to run B9S .firm files from bootrom via a DSi Flashcard and a magnet! This works on every 3DS on any firmware version.

For installation without a PC, user @TheCyberQuake has created a pack which will automatically install B9S and copy over essential starter homebrew from the flashcard's SD to the 3DS's. This will mainly be used for PC-less B9S installations. If you have a PC with you, use 3ds.guide. Read more here: https://gbatemp.net/threads/481141/

How does this work?

This works because of a flaw in the bootrom. Before the bootrom boots the NAND, it checks to see if Start+Select+X is held down, and if the shell is closed. If these requirements are met, it will boot an NDS cartridge from the bootrom. This give that cartridge bootrom access. You might be wondering how you'd hold down buttons while the shell is closed, and why you need a magnet. If you put a magnet in a specific spot on the 3DS, it will go into sleep mode. Using this, you can boot the NDS cartridge with the buttons held down while in sleep mode! Using a reflashable flashcard, you can boot B9SInstaller using the flashcard, and easily install it on your 3DS.

The 2DS doesn't need a magnet since a switch puts it to sleep instead of a magnet.

What does this mean?

1. Any 3DS model on any firmware can be hacked with minimal effort
2. You can unbrick any 3DS model from any type of brick.
   - Remember, you don't need a NAND backup for this. Just do a CTRTransfer.
   - This does not apply to MCU bricks.
3. Even consoles with fried NAND, or even the NAND chip physically removed, can use this

This is incredibly impressive stuff, and will most likely be released soon! edit: now!

FAQ

Q: Can Nintendo patch this?
A: Nope! Not without a new hardware revision.

Q: My flashcard is blocked by my firmware! Can I still use this?
A: Yes! The flashcard blacklist is not enabled on the bootrom.

Q: Why can't this work with my flashcard?
A: The installation requires you to flash NTRBoot to the flashcard's nand. Most DS flashcards, such as the original R4, have a ROM, which is not flashable.

Q: Can I install NTRBoot on my flashcard without another 3DS system?
A: If you can run NDS roms on your 3DS with it, then yes. If it's blocked on your 3DS version, then you'll need another 3DS system to use it.

Q: Will my 3DS flashcard work?
A: No, only the NDSi flashcards listed above.

Q: Will any other flash cards work?
A: Only the ones listed in the OP. However keep in mind that flashcards such as the DSTT, Supercard DS2 and R4 SDHC Dualcore are planned to be supported in the future.

Q: I tried to do this with my cartridge and it didn't work?
A: It doesn't work with regular DS cards.

Q: Can I unbrick from a ____ brick?
A: Considering the card has access to the bootrom, yes! This can unbrick any brick (except MCU), unless you've taken a knife to the motherboard.

Q: Can I install B9S on the latest firmware with this?
A: Again, since the card has access to the bootrom, you can do this easily! Just plug in your flashcard, boot up using the magnet and button combination, and install.

Q: Does this work on the New Nintendo 2DS XL?
A: Yes!

Release
Guide
Free NTRBoot Flashing
Free B9S Installations

Here is SciresM's post about this

Please see SciresM's presentation on bootromhax.​

 

[Snooli]

Acekard 2i and DSTWO are first in line for this exploit.
Fun fact regarding today's price changes: I just found a shop that sells AK2i for more than in a combo with SD card. They have yet to make that more expensive

 

[Deleted User]

Acekard 2i and DSTWO are first in line for this exploit.
Fun fact regarding today's price changes: I just found a shop that sells AK2i for more than in a combo with SD card. They have yet to make that more expensive

PM me the store

 

[Darklinkreturns]

[deleted]

 

[Deleted User]

I decided to bite the bullet and buy one from nds-card.com before prices are driven up insane.

Will report how things go once i get it and this is released! You guys all do know that this exists, right: https://github.com/Normmatt/ntrcardhax

AND IT HAS STUFF FOR A2KI!

 

[dimmidice]

I decided to bite the bullet and buy one from nds-card.com before prices are driven up insane.

Will report how things go once i get it and this is released! You guys all do know that this exists, right: https://github.com/Normmatt/ntrcardhax

AND IT HAS STUFF FOR A2KI!

What's your point exactly? With that github link i mean. Because it seems quite old and abandoned.

 

[zerofalcon]

Long time ago I recieved from a friend a pretty fucked up o3ds xl with a fried nand, until now, I knew the console it will never come to life again. With this amazing hack it seems it could be possible to revive it. I just tested if the magnet trick works and voila!. Now we just have to wait!

 

[Billy Acuña]

What's your point exactly? With that github link i mean. Because it seems quite old and abandoned.

That is NTRCardHax explained by Plutoo on the 2015's 3c33, nothing relevant to this (I guess...)

 

[DAZA]

Outwitted by a magnet....Classic

 

[Urbanshadow]

Wellp. With the correct magnet, being b9s universal, this is like the best hardmod ever existed and the ultimate 3ds softmod method altogether. Brutal find.

 

[Natboy]

I've got a Gateway that I haven't touched since AL9H came onto the scene, but it did come with a nds flashcart of some sort. Does anyone know what it's a clone of, or should I start looking?

 

[ThisIsDaAccount]

I really hope they end up using the DSTWO, I've had one since I got my first 3DS.

Although I don't really need it, I guess, since I have B9S.

 

[Deleted User]

What's your point exactly? With that github link i mean. Because it seems quite old and abandoned.

Nothing much. Its just that with a custom header, the 3ds won't read the DS cart. I was just thinking someone could flash their's with the bin and see how it goes

 

[Tenshi_Okami]

Nothing much. Its just that with a custom header, the 3ds won't read the DS cart. I was just thinking someone could flash their's with the bin and see how it goes

This is different. This is not the same exploit talked in here.

This exploit is an old one that got patched on 10.3/10.4(something close to this)

It only enabled ARM9 code execution.
Explanation it's in here: https://www.3dbrew.org/wiki/3DS_System_Flaws
(press Ctrl+F and type ntrcard)

 

[Deleted User]

This is different. This is not the same exploit talked in here.

This exploit is an old one that got patched on 10.3/10.4(something close to this)

It only enabled ARM9 code execution.
Explanation it's in here: https://www.3dbrew.org/wiki/3DS_System_Flaws
(press Ctrl+F and type ntrcard)

Ah. Rip. I'm at the gym right now so will check it later

 

[Tenshi_Okami]

Ah. Rip. I'm at the gym right now so will check it later

Alright. Just to let you know, this was the one of the first exploits that needed a re-flashable flashcard. But since on 10.3 we had memchunkhax2 and 2.1, it never got implemented completely sadly..

 

[yoquesejeje]

I have an old 3ds briked with that blue window , where i put the magnet for sleep mode ? , its the first old 3ds the small one. Thanks . Waiting for the files.i.have an R4 dualcore and the second gateway cart.

 

[Deleted User]

I have an old 3ds briked with that blue window , where i put the magnet for sleep mode ? , its the first old 3ds the small one. Thanks . Waiting for the files.i.have an R4 dualcore and the second gateway cart.

I posted this video on page 20 showing the place for old nonxl and how it didn't turn on. You should read the other pages before asking

 

[yoquesejeje]

I posted this video on page 20 showing the place for old nonxl and how it didn't turn on. You should read the other pages before asking

Thanks i read the first pages i didnt reach pag 20, but your right .

 

[Deleted User]

Thanks i read the first pages i didnt reach pag 20, but your right .

Was your system able to turn on with the magnet?

 

[Deleted User]

you know what just snip the whole damn post