It's here!

​

Info

@Normmatt has created a way to run B9S .firm files from bootrom via a DSi Flashcard and a magnet! This works on every 3DS on any firmware version.

For installation without a PC, user @TheCyberQuake has created a pack which will automatically install B9S and copy over essential starter homebrew from the flashcard's SD to the 3DS's. This will mainly be used for PC-less B9S installations. If you have a PC with you, use 3ds.guide. Read more here: https://gbatemp.net/threads/481141/

How does this work?

This works because of a flaw in the bootrom. Before the bootrom boots the NAND, it checks to see if Start+Select+X is held down, and if the shell is closed. If these requirements are met, it will boot an NDS cartridge from the bootrom. This give that cartridge bootrom access. You might be wondering how you'd hold down buttons while the shell is closed, and why you need a magnet. If you put a magnet in a specific spot on the 3DS, it will go into sleep mode. Using this, you can boot the NDS cartridge with the buttons held down while in sleep mode! Using a reflashable flashcard, you can boot B9SInstaller using the flashcard, and easily install it on your 3DS.

The 2DS doesn't need a magnet since a switch puts it to sleep instead of a magnet.

What does this mean?

1. Any 3DS model on any firmware can be hacked with minimal effort
2. You can unbrick any 3DS model from any type of brick.
   - Remember, you don't need a NAND backup for this. Just do a CTRTransfer.
   - This does not apply to MCU bricks.
3. Even consoles with fried NAND, or even the NAND chip physically removed, can use this

This is incredibly impressive stuff, and will most likely be released soon! edit: now!

FAQ

Q: Can Nintendo patch this?
A: Nope! Not without a new hardware revision.

Q: My flashcard is blocked by my firmware! Can I still use this?
A: Yes! The flashcard blacklist is not enabled on the bootrom.

Q: Why can't this work with my flashcard?
A: The installation requires you to flash NTRBoot to the flashcard's nand. Most DS flashcards, such as the original R4, have a ROM, which is not flashable.

Q: Can I install NTRBoot on my flashcard without another 3DS system?
A: If you can run NDS roms on your 3DS with it, then yes. If it's blocked on your 3DS version, then you'll need another 3DS system to use it.

Q: Will my 3DS flashcard work?
A: No, only the NDSi flashcards listed above.

Q: Will any other flash cards work?
A: Only the ones listed in the OP. However keep in mind that flashcards such as the DSTT, Supercard DS2 and R4 SDHC Dualcore are planned to be supported in the future.

Q: I tried to do this with my cartridge and it didn't work?
A: It doesn't work with regular DS cards.

Q: Can I unbrick from a ____ brick?
A: Considering the card has access to the bootrom, yes! This can unbrick any brick (except MCU), unless you've taken a knife to the motherboard.

Q: Can I install B9S on the latest firmware with this?
A: Again, since the card has access to the bootrom, you can do this easily! Just plug in your flashcard, boot up using the magnet and button combination, and install.

Q: Does this work on the New Nintendo 2DS XL?
A: Yes!

Release
Guide
Free NTRBoot Flashing
Free B9S Installations

Here is SciresM's post about this

Please see SciresM's presentation on bootromhax.​

 

[nemopsp]

I got R4i 3DS by https://www.r4i-sdhc.com along time ago for my original DS, would this flashcart work with NTRBoot? Or how do you know if your flashcart has a flashable rom or is mine counterfeit card?

Sent from my iPhone using Tapatalk Pro

 

[ShadowOne333]

Is there like a flashcart checker or something?
Perhaps a tool that tells us the cart ID, specs or whatever to know if what we have could be used for NTRBoot or not.

 

[TheCyberQuake]

Is there like a flashcart checker or something?
Perhaps a tool that tells us the cart ID, specs or whatever to know if what we have could be used for NTRBoot or not.

You use the ntrboot flasher and it tells you.

 

[Timburpton]

By the way, how long does it take to mod a clean 3ds using NTRboot?

 

[Redferne]

By the way, how long does it take to mod a clean 3ds using NTRboot?

Around 5 mins if you already prepare the files.

 

[TheCyberQuake]

By the way, how long does it take to mod a clean 3ds using NTRboot?

Using my ntrpack set up, I've speedrun install and have gotten 2 minutes 27 seconds from clean 11.5 ofw to b9s Luma. And if godmode9 adds a script command for its firm install option I could probably get it done even faster. But for now with proper pre-setup you can easily get sub 3 minutes.

 

[urherenow]

By the way, how long does it take to mod a clean 3ds using NTRboot?

Around 5 mins if you already prepare the files.

Huh? More like 2 minutes. Remove SD, drag&drop folder of goodies, put back, bootntr->boo9strap->luma. Not even 2 minutes.

EDIT: of course I use ntr_boot.firm as my safeboot9strap installer, so luma can boot immediately as boot.firm...

 

[Timburpton]

Huh? More like 2 minutes. Remove SD, drag&drop folder of goodies, put back, bootntr->boo9strap->luma. Not even 2 minutes.

EDIT: of course I use ntr_boot.firm as my safeboot9strap installer, so luma can boot immediately as boot.firm...

So technically I can set up the files in such a way I need only to transfer the files to SD once?

 

[TheCyberQuake]

So technically I can set up the files in such a way I need only to transfer the files to SD once?

Yes

 

[urherenow]

So technically I can set up the files in such a way I need only to transfer the files to SD once?

Yes, but not with the official ntr build of safeboot9strap. Custom build it, or use one posted earlier in here somewhere.

 

[d0k3]

@d0k3 The ntrboohax flasher for dstt use the DSTTFlashwriter? Because the version in the DSTT_FakeRecovery is old, the newer version is here https://www.linfoxdomain.com/nintendo/ds/?mode=fileinfo&fileid=2543 and support more chips.

Thanks a ton, this helps a lot! And, yeah, you can install NTRboot via the flasher, but not recommended. We use the flasher for reverse engineering, and eventually (don't worry, won't take too long) this will make it into a proper installer.

 

[Timburpton]

How can I test that I have gotten NTRboot set up properly? I only have one 3ds and its already b9s.

 

[nl255]

How can I test that I have gotten NTRboot set up properly? I only have one 3ds and its already b9s.

Install this version of b9s-ntr to your flash cart which uses ntrboot.firm rather than the standard boot.firm, then rename godmode9.firm to ntrboot.firm and put it on the root of your 3ds sd card. Note that after doing this, whenever the guide says to copy SafeB9SInstaller.firm and rename it to boot.firm (Section 1 step 3) you will need to rename it to ntrboot.firm instead.

 

[Ramzitv1]

I got R4i 3DS by https://www.r4i-sdhc.com along time ago for my original DS, would this flashcart work with NTRBoot? Or how do you know if your flashcart has a flashable rom or is mine counterfeit card?

Sent from my iPhone using Tapatalk Pro

No.Only R4i GOLD 3DS RTS (r4ids.cn variant) Would work.

 

[Redferne]

Huh? More like 2 minutes. Remove SD, drag&drop folder of goodies, put back, bootntr->boo9strap->luma. Not even 2 minutes.

For someone who never done it and is following the guide, yes 5 min maybe more.
It's not speed contest... We're far from the hours it took at the beginning of A9HL.

 

[annson24]

For someone who never done it and is following the guide, yes 5 min maybe more.
It's not speed contest... We're far from the hours it took at the beginning of A9HL.

Yuo. First time i hacked a 3ds, took me about 6hours. And oh, the agony of removing and inserting the sd from the 3ds and PC multiple times.

Sent from my SM-G950F using Tapatalk

 

[Timburpton]

Yuo. First time i hacked a 3ds, took me about 6hours. And oh, the agony of removing and inserting the sd from the 3ds and PC multiple times.

Sent from my SM-G950F using Tapatalk

I know right, I did mine back in the A9LH downgrade to 9.2 days. Took me 3 hours. Did another 3DS still took me 2 hours.

Recently with the soundhax took me 1.2 hours and now you guys are telling me NTRboot takes <5 minutes? Hot damn.

 

[annson24]

I know right, I did mine back in the A9LH downgrade to 9.2 days. Took me 3 hours. Did another 3DS still took me 2 hours.

Recently with the soundhax took me 1.2 hours and now you guys are telling me NTRboot takes <5 minutes? Hot damn.

You should've seen how painful it was back then when we have to make an emunand first and all, and have to brick the 3ds intentionally just to install a9lh. Oh, those were the times.

Sent from my SM-G950F using Tapatalk

 

[NichyXD]

Thanks a ton, this helps a lot! And, yeah, you can install NTRboot via the flasher, but not recommended. We use the flasher for reverse engineering, and eventually (don't worry, won't take too long) this will make it into a proper installer.

I have a DSTT if you need testers, no problem! Feel free to contact me

 

[urherenow]

How can I test that I have gotten NTRboot set up properly? I only have one 3ds and its already b9s.

Leave the magnet in place after you let go of the buttons. If it worked, the safeboot9strap installer will come up. If it didn't work, the screen will stay black (if your magnet placement is correct).

You should've seen how painful it was back then when we have to make an emunand first and all, and have to brick the 3ds intentionally just to install a9lh. Oh, those were the times.

Sent from my SM-G950F using Tapatalk

EMUNAND has ALWAYS been a choice. A good choice, but to fair, it was never required for any cfw or GW. Not at all. Now there is less reason to have one, but some people have use for it regardless. (region-free patches don't let you browse other region's eshop, but a region change can (I think?) for example)