It's here!

​

Info

@Normmatt has created a way to run B9S .firm files from bootrom via a DSi Flashcard and a magnet! This works on every 3DS on any firmware version.

For installation without a PC, user @TheCyberQuake has created a pack which will automatically install B9S and copy over essential starter homebrew from the flashcard's SD to the 3DS's. This will mainly be used for PC-less B9S installations. If you have a PC with you, use 3ds.guide. Read more here: https://gbatemp.net/threads/481141/

How does this work?

This works because of a flaw in the bootrom. Before the bootrom boots the NAND, it checks to see if Start+Select+X is held down, and if the shell is closed. If these requirements are met, it will boot an NDS cartridge from the bootrom. This give that cartridge bootrom access. You might be wondering how you'd hold down buttons while the shell is closed, and why you need a magnet. If you put a magnet in a specific spot on the 3DS, it will go into sleep mode. Using this, you can boot the NDS cartridge with the buttons held down while in sleep mode! Using a reflashable flashcard, you can boot B9SInstaller using the flashcard, and easily install it on your 3DS.

The 2DS doesn't need a magnet since a switch puts it to sleep instead of a magnet.

What does this mean?

1. Any 3DS model on any firmware can be hacked with minimal effort
2. You can unbrick any 3DS model from any type of brick.
   - Remember, you don't need a NAND backup for this. Just do a CTRTransfer.
   - This does not apply to MCU bricks.
3. Even consoles with fried NAND, or even the NAND chip physically removed, can use this

This is incredibly impressive stuff, and will most likely be released soon! edit: now!

FAQ

Q: Can Nintendo patch this?
A: Nope! Not without a new hardware revision.

Q: My flashcard is blocked by my firmware! Can I still use this?
A: Yes! The flashcard blacklist is not enabled on the bootrom.

Q: Why can't this work with my flashcard?
A: The installation requires you to flash NTRBoot to the flashcard's nand. Most DS flashcards, such as the original R4, have a ROM, which is not flashable.

Q: Can I install NTRBoot on my flashcard without another 3DS system?
A: If you can run NDS roms on your 3DS with it, then yes. If it's blocked on your 3DS version, then you'll need another 3DS system to use it.

Q: Will my 3DS flashcard work?
A: No, only the NDSi flashcards listed above.

Q: Will any other flash cards work?
A: Only the ones listed in the OP. However keep in mind that flashcards such as the DSTT, Supercard DS2 and R4 SDHC Dualcore are planned to be supported in the future.

Q: I tried to do this with my cartridge and it didn't work?
A: It doesn't work with regular DS cards.

Q: Can I unbrick from a ____ brick?
A: Considering the card has access to the bootrom, yes! This can unbrick any brick (except MCU), unless you've taken a knife to the motherboard.

Q: Can I install B9S on the latest firmware with this?
A: Again, since the card has access to the bootrom, you can do this easily! Just plug in your flashcard, boot up using the magnet and button combination, and install.

Q: Does this work on the New Nintendo 2DS XL?
A: Yes!

Release
Guide
Free NTRBoot Flashing
Free B9S Installations

Here is SciresM's post about this

Please see SciresM's presentation on bootromhax.​

 

[sapfel93]

I already have CFW but for curiosity's sake, does this work with R4 SDHC Gold Pro?

 

[KuroGentei]

NTRbootboot was successfully installed on the ak2i. How do I boot the exploit on the Nintendo OLD2DS?
Sleep Switch on and hold combo Power on + Start + select + x do not produce any desired success.

https://3ds.guide/installing-boot9strap-(ntrboot)

You still need the usual files on the target 3DS's SD card.

The files are available on the SD card of course.

With the combo (Sleep switch on) -> Power on -> (hold) Start + Select + X, the screen remains black and does nothing.

 

[magypsy3]

I really really need this for DS2

 

[xXDungeon_CrawlerXx]

Where's the best place to buy one of the supported Cards in Europe/Germany?

 

[Platinum Lucario]

Yay! I'm so happy that has just been released. It will help unbrick Nintendo 3DS consoles and users can now use any .firm file using this method as well.

But with that said, I just want to point out that we should also do our best to hide our online activity as much as possible. Please beware of any incoming hyperbans that may be coming as a result of the release of ntrboothax in the future. We know Nintendo became furious after they learned that an unpatchable Boot9Strap was released, with the release of ntrboothax may also make Nintendo even more furious than they were when B9S was released.

Everyone, please be careful. And best of luck! I know this is just speculation, but I do feel that it could happen.

 

[migles]

@Lia can put pictures of the exact r4 card? there are plenty of them r4

 

[Cava]

@Lia can put pictures of the exact r4 card? there are plenty of them r4

http://www.nds-card.com/ProShow.asp?ProID=149

 

[RedBlueGreen]

i feel like there should be some pictures and stuff added for the supported carts.
we all know theres a billion r4 type of flashcarts from various, similarily sounding websites with very different firmwares and such.

before there's a million 'is my r4 cart supported' or 'ive got an r4 cart, but something dont work!' type of threads

Yeah definitely. Especially since they're also sold on the same stores. R4 Gold 2016 RTS SDHC doesn't work yet, nor does the R4 SDHC Dual Core. I assume those are basically the same.

 

[migles]

http://www.nds-card.com/ProShow.asp?ProID=149

glad it's that one.
funny how i always kept telling people they should choose that one..
and after all it's the few that can use ntrboot

 

[RedBlueGreen]

glad it's that one.
funny how i always kept telling people they should choose that one..
and after all it's the few that can use ntrboot

Support for the newer ones seems to be being developed.

 

[migles]

newer

"newer" ?
you mean the shit software tweaked with a 2017 sticker?

 

[xXDungeon_CrawlerXx]

Dumping Flash:
ChipID: 00000FC2
HW Rev: 2A2A2A2A
Supported cartridge not detected!

Not supported

 

[Platinum Lucario]

Dumping Flash:
ChipID: 00000FC2
HW Rev: 2A2A2A2A
Supported cartridge not detected!

Not supported

It's one of those clone flash cards. Check to make sure it says "r4ids.cn" on it, that usually indicates that it's an official one.

 

[xXDungeon_CrawlerXx]

It's one of those clone flash cards. Check to make sure it says "r4ids.cn" on it, that usually indicates that it's an official one.

yea, it's a clone unfortunately
Do you know where I can get a supported Flashcard?

 

[Platinum Lucario]

yea, it's a clone unfortunately
Do you know where I can get a supported Flashcard?

Normally www.r4ids.cn will actually tell you which websites actually sell their official flash cards.

Here: http://www.r4ids.cn/buy-r4i-e.htm

 

[Deleted User]

Nice release !

Do you know if they will support the DS iPlayer ? It was created by supercard Team and have similarities with the DS Two (The kind of firmware, the chipset), for example the DS iPlayer has the GBA Emulator plugin too ! The only thing is that it only launch homebrew and not real rom (actually i think if someone could hack the firmware it would be possible)

http://www.dsiplayer.com

(I have only one DS One i and DS Iplayer that's why)

 

[Akira]

Do i have to keep pressing the buttons till safeb9sinstaller pops up?

 

[Deleted member 381889]

@Lia can put pictures of the exact r4 card? there are plenty of them r4

I'll do it when I get to somewhere with wifi. I'm currently in the middle of travelling.

 

[xXDungeon_CrawlerXx]

Normally www.r4ids.cn will actually tell you which websites actually sell their official flash cards.

Here: http://www.r4ids.cn/buy-r4i-e.htm

So this flashcard will work?
Found a Store in Germany from their list which support "my kind of banking"

 

[blckshrk]

I already have B9S for a while but...
Everyone just mentions the R4i Gold 3DS RTC. But there are also older non-RTC cards (sold 2011 and earlier I guess) that look like this:

When I dumped the flash I got the following result:

Dumping flash
ChipID: 00000FC2
HW Rev: A7A7A7A7
Detected R4i Gold 3DS

Dump Completed!

So I can assume that those are the same then?