It's here!

​

Info

@Normmatt has created a way to run B9S .firm files from bootrom via a DSi Flashcard and a magnet! This works on every 3DS on any firmware version.

For installation without a PC, user @TheCyberQuake has created a pack which will automatically install B9S and copy over essential starter homebrew from the flashcard's SD to the 3DS's. This will mainly be used for PC-less B9S installations. If you have a PC with you, use 3ds.guide. Read more here: https://gbatemp.net/threads/481141/

How does this work?

This works because of a flaw in the bootrom. Before the bootrom boots the NAND, it checks to see if Start+Select+X is held down, and if the shell is closed. If these requirements are met, it will boot an NDS cartridge from the bootrom. This give that cartridge bootrom access. You might be wondering how you'd hold down buttons while the shell is closed, and why you need a magnet. If you put a magnet in a specific spot on the 3DS, it will go into sleep mode. Using this, you can boot the NDS cartridge with the buttons held down while in sleep mode! Using a reflashable flashcard, you can boot B9SInstaller using the flashcard, and easily install it on your 3DS.

The 2DS doesn't need a magnet since a switch puts it to sleep instead of a magnet.

What does this mean?

1. Any 3DS model on any firmware can be hacked with minimal effort
2. You can unbrick any 3DS model from any type of brick.
   - Remember, you don't need a NAND backup for this. Just do a CTRTransfer.
   - This does not apply to MCU bricks.
3. Even consoles with fried NAND, or even the NAND chip physically removed, can use this

This is incredibly impressive stuff, and will most likely be released soon! edit: now!

FAQ

Q: Can Nintendo patch this?
A: Nope! Not without a new hardware revision.

Q: My flashcard is blocked by my firmware! Can I still use this?
A: Yes! The flashcard blacklist is not enabled on the bootrom.

Q: Why can't this work with my flashcard?
A: The installation requires you to flash NTRBoot to the flashcard's nand. Most DS flashcards, such as the original R4, have a ROM, which is not flashable.

Q: Can I install NTRBoot on my flashcard without another 3DS system?
A: If you can run NDS roms on your 3DS with it, then yes. If it's blocked on your 3DS version, then you'll need another 3DS system to use it.

Q: Will my 3DS flashcard work?
A: No, only the NDSi flashcards listed above.

Q: Will any other flash cards work?
A: Only the ones listed in the OP. However keep in mind that flashcards such as the DSTT, Supercard DS2 and R4 SDHC Dualcore are planned to be supported in the future.

Q: I tried to do this with my cartridge and it didn't work?
A: It doesn't work with regular DS cards.

Q: Can I unbrick from a ____ brick?
A: Considering the card has access to the bootrom, yes! This can unbrick any brick (except MCU), unless you've taken a knife to the motherboard.

Q: Can I install B9S on the latest firmware with this?
A: Again, since the card has access to the bootrom, you can do this easily! Just plug in your flashcard, boot up using the magnet and button combination, and install.

Q: Does this work on the New Nintendo 2DS XL?
A: Yes!

Release
Guide
Free NTRBoot Flashing
Free B9S Installations

Here is SciresM's post about this

Please see SciresM's presentation on bootromhax.​

 

[nl255]

Moral of the story, if you want something done right, do it yourself.

Have you contacted either of the people/teams working on it with your flash cart discovery and if so did you get a response?

 

[The Catboy]

Have you contacted either of the people/teams working on it with your flash cart discovery and if so did you get a response?

I haven't contacted anyone at the moment .-. I tend to wait for devs to finish their work before messaging with my own stuff. I hate to be a bother.

 

[nl255]

I haven't contacted anyone at the moment .-. I tend to wait for devs to finish their work before messaging with my own stuff. I hate to be a bother.

Well as I understand it the main obstacle to release is (or at least was) supporting more flash carts. Which means your stuff might actually make the release happen faster.

 

[The Catboy]

Well as I understand it the main obstacle to release is (or at least was) supporting more flash carts. Which means your stuff might actually make the release happen faster.

Oh~ anyone got any contact information they can spend my way so I can contact them?

 

[nl255]

Oh~ anyone got any contact information they can spend my way so I can contact them?

Well you could PM @SciresM on here.

 

[The Catboy]

Well you could PM @SciresM on here.

Sending a PM now! Hopefully my research can help!

 

[Joom]

@Lilith Valentine, sorry for asking you to regurgitate apparently old information, but I missed this. What discovery did you make? Also, all the devs are on #Cakey on Freenode, which is much more instant than PMs here.

 

[The Catboy]

@Lilith Valentine, sorry for asking you to regurgitate apparently old information, but I missed this. What discovery did you make? Also, all the devs are on &#Cakey on Freenode, which is much more instant than PMs here.

In depth research starts from this post and continues from there.
TL: DR version, I came to find out that DSi flashcarts actually used a read-write NAND that contained pre-exploited ROMs. These ROMs were swapped out by the updaters, but it was basically the same exploit for each ROM. So with the proper tool, I could in theory, gain access to the the NAND and add my own ROMs or exploits.
Eh~ not a big fan of IRC, I know they get on, so hopefully they see my PM.

 

[SciresM]

The relevant information isn't new. As a general rule, you can assume Normmatt understands the Ak2i in probably more detail than you or anyone you know (he wrote the AKAIO kernel)....

 

[nl255]

The relevant information isn't new. As a general rule, you can assume Normmatt understands the Ak2i in probably more detail than you or anyone you know (he wrote the AKAIO kernel)....

Except that it isn't just the Ak2i, it is pretty much every updatable DS mode flash cart including the R4i 3DS RTS that everyone recommends.

 

[The Catboy]

The relevant information isn't new. As a general rule, you can assume Normmatt understands the Ak2i in probably more detail than you or anyone you know (he wrote the AKAIO kernel)....

But there is more to my research, I was able to find out that almost every DSi cart used this method. They all used the same method of storing full ROMs on a NAND and swapping them out with header update. I was able dump full ROMs from 4 carts and even able to find where they stored the exploit. All of these carts used small update files that very clearly didn't have the ROM data in them.
This means that every single DSi flashcart that could be updated will have these ROMs stored on a rewritable chip (be it flash or a NAND.) I feel like that kind of information could help when dealing with these carts.

 

[ivoyko]

My black N3DS XL has been bricked since late 2015, it's a good thing I've stuck with it and kept it in a safe place.

My Cosmos Black 3DS bricked in the PALANTINE era... someone win me.

 

[Deleted member 381889]

prepares to update OP but can't really because she's in the middle of travelling
I'm excited for this release though lol

--------------------- MERGED ---------------------------

Okay I updated it lol
Time to go panic now because I'm really busy

 

[RedBlueGreen]

Now that it's out is there a way to go back to a completely "clean" system?

 

[The Catboy]

So something important for Ak2i users, your cart needs to have a header that worked on the 3DS in order for this to work. If you are using the ak2i header (Danny Phantom - Urban Jungle/Alex Rider: Stormbreaker) this will not work. So make sure you are running anything that worked from 1.0 to the ugly horse.
Attempting to use the Ak2i header on my end would not work for me until I updated to a header that had worked on the 3DS. Please test these results though, it could just be on my end.

 

[Arck]

The only card I have is a DSTWO and the Gateway blue card, my friend wanted to hack his 3ds, I hope they won't be out of stock

 

[democracy]

Wow, finally, thank you!

So I have both cards, which is better for DS cart use?

 

[Arck]

So I have both cards, which is better for DS cart use?

They should be the same, don't use the card you use the most.
Juts incase...

 

[GibWaffles]

I only have a supercard ds two. Is it going to be supported in the foreseeable future, or should I buy one of the supported cards.

 

[Arck]

I only have a supercard ds two. Is it going to be supported in the foreseeable future, or should I buy one of the supported cards.

They said it's planned:
https://github.com/kitling/flashcart_core#planned-cards