Hacking Safehax (11.1/2) downgrade without DSIWare

[JoshuaDoes]

Here's a way that it can actually work out:

1. Extract files to SD
2. Boot 3DS on 11.2
3. Open 3DS Sound
4. <3 nedwill 2016
5. Boots sdmc:/boot.3dsx (Fasthax.3dsx renamed to boot.3dsx)
6. Installs svcBackdoor
7. ARM11 access
8. Firmlaunch SAFE_MODE
9. Sync up with the ARM9
10. Launch firmlaunch-hax to reboot into SAFE_MODE with ARM9 access
11. Take entire NAND backup
12. CTR_NAND to 2.1.0
13. Continue Plailect guide from specified point

 

[coolcatg]

Here it is, all credit goes to OP on reddit!


Keep in mind, this REQUIRES the fasthax source to be compiled TO WORK ON 11.2, IT ALREADY WORKS ON 11.0/11.1 with waithax and 9.3-10.7 with svchax!

Thank you to /u/SaulFemm for these usage instructions for 9.3-11.1:

1. Copy this release of safehax here at https://github.com/TiniVi/safehax/files/681328/safehax.zip to your /3ds/ folder on your SD card.
   
   
2. Download decrypt9 from https://github.com/d0k3/Decrypt9WIP/releases/. Copy Decrypt9WIP.bin to the root of your SD card, rename it to arm9.bin
   
   
3. Use soundhax (or your choice) to get into the homebrew launcher. Run safehax.
   
   
4. Wait for the built-in waithax/svchax to finish, at which point decrypt9 should boot.
   
   
5. Follow the instructions from the guide beginning at https://3ds.guide/2.1.0-ctrtransfer

TiniVi updated the waithax used in safehax in a commit made about half an hour ago, if somebody could compile safehax again that would be appreciated!

EDIT: If ANY system update drops soon, DO NOT UPDATE! Use ctr-httpwn (included in the Homebrew Starter Kit) via Soundhax or another Homebrew Launcher entrypoint if you have one to access online features (eShop, online play, etc.) WITHOUT updating to the latest version.


If anyone tries it out and it works before I do let me know if these steps worked or if you found other steps!

 

[Yepi69]

Will this work on an o3DS with 11.2e ?
If so, can anyone tell me which steps to take?

Sent from my Vodafone_SU6 using Tapatalk

 

[WaterBotttle]

Here it is, all credit goes to OP on reddit!


Keep in mind, this REQUIRES the fasthax source to be compiled TO WORK ON 11.2, IT ALREADY WORKS ON 11.0/11.1 with waithax and 9.3-10.7 with svchax!

Thank you to /u/SaulFemm for these usage instructions for 9.3-11.1:

1. Copy this release of safehax here at https://github.com/TiniVi/safehax/files/681328/safehax.zip to your /3ds/ folder on your SD card.
   
   
2. Download decrypt9 from https://github.com/d0k3/Decrypt9WIP/releases/. Copy Decrypt9WIP.bin to the root of your SD card, rename it to arm9.bin
   
   
3. Use soundhax (or your choice) to get into the homebrew launcher. Run safehax.
   
   
4. Wait for the built-in waithax/svchax to finish, at which point decrypt9 should boot.
   
   
5. Follow the instructions from the guide beginning at https://3ds.guide/2.1.0-ctrtransfer

TiniVi updated the waithax used in safehax in a commit made about half an hour ago, if somebody could compile safehax again that would be appreciated!

EDIT: If ANY system update drops soon, DO NOT UPDATE! Use ctr-httpwn (included in the Homebrew Starter Kit) via Soundhax or another Homebrew Launcher entrypoint if you have one to access online features (eShop, online play, etc.) WITHOUT updating to the latest version.

This is basically what's in the OP (Admittedly it's worded more nicely )

--------------------- MERGED ---------------------------

Here's a way that it can actually work out:

1. Extract files to SD
2. Boot 3DS on 11.2
3. Open 3DS Sound
4. <3 nedwill 2016
5. Boots sdmc:/boot.3dsx (Fasthax.3dsx renamed to boot.3dsx)
6. Installs svcBackdoor
7. ARM11 access
8. Firmlaunch SAFE_MODE
9. Sync up with the ARM9
10. Launch firmlaunch-hax to reboot into SAFE_MODE with ARM9 access
11. Take entire NAND backup
12. CTR_NAND to 2.1.0
13. Continue Plailect guide from specified point

Yep that's correct, there's already an implementation of most of this already. https://github.com/TiniVi/safehax
So you won't need to do most of those things. Like installing the svcBackdoor

 

[coolcatg]

This is basically what's in the OP (Admittedly it's worded more nicely )

Sorry about that want me to delete it or will it be alright? It just made sense to me, then again I am really tired

 

[WaterBotttle]

Sorry about that want me to delete it or will it be alright? It just made sense to me, then again I am really tired

Don't worry, it's not a problem really. Anybody could figure out those steps.

 

[JoshuaDoes]

This is basically what's in the OP (Admittedly it's worded more nicely )

--------------------- MERGED ---------------------------


Yep that's correct, there's already an implementation of most of this already. https://github.com/TiniVi/safehax
So you won't need to do most of those things. Like installing the svcBackdoor

Yeah, I was just referencing the exact steps that are being taken by it. Safehax is definitely going to be really useful, and it should work on every system version. However, based on the amount of vulnerabilities we have, it most likely is going to stick to 9.0+ usage.

I personally want to try to streamline as much of the process as possible, and that's why I'd rename Fasthax.3dsx to boot.3dsx and place it on the root of the SD card. I'd also want to patch Fasthax to immediately jump to Safehax once it completes rather than exit back to the home menu, and just jump back to the home menu if it fails. And the Safehax process could possibly be patched to streamline NAND dumping and then CTRNAND transferring, just to make life as simple as possible up until that point. Then once it boots into 2.1.0, continue from that point of the Plailect guide.

 

[Yoluha]

Is this a dream?

 

[WaterBotttle]

Yeah, I was just referencing the exact steps that are being taken by it. Safehax is definitely going to be really useful, and it should work on every system version. However, based on the amount of vulnerabilities we have, it most likely is going to stick to 9.0+ usage.

I personally want to try to streamline as much of the process as possible, and that's why I'd rename Fasthax.3dsx to boot.3dsx and place it on the root of the SD card. I'd also want to patch Fasthax to immediately jump to Safehax once it completes rather than exit back to the home menu, and just jump back to the home menu if it fails. And the Safehax process could possibly be patched to streamline NAND dumping and then CTRNAND transferring, just to make life as simple as possible up until that point. Then once it boots into 2.1.0, continue from that point of the Plailect guide.

Safehax already has waithax built into it and I assume is going to have fasthax ready as well. So some of the streamlining is already there.

 

[nechigawara]

Nice!! Although I already hax all my 3DS and doesn't help me much. Hope it will be stable soon.

 

[rikumax25!]

Is this a dream?

is this real life? is it just fantasy?

 

[LuckyExploit]

Thanks for extra help and guides.

 

[Hyoretsu]

Is this a dream?

Yes. Now wake up, you're late for work.

 

[nechigawara]

Yes. Now wake up, you're late for work.

In my country, it's still New Year holiday.

 

[ARVI80]

Yay, so I just wait for fasthax to be implement and then I can downgrade my 2ds on 11.2 without the need for dsiware or another 3ds with cfw? I'm not making this up am I ?

 

[rikumax25!]

Yay, so I just wait for fasthax to be implement and then I can downgrade my 2ds on 11.2 without the need for dsiware or another 3ds with cfw? I'm not making this up am I ?

you got ir right, son

 

[nechigawara]

Yay, so I just wait for fasthax to be implement and then I can downgrade my 2ds on 11.2 without the need for dsiware or another 3ds with cfw? I'm not making this up am I ?

Yup. Wait for SafeHax to implement FastHax code and you will be find.

 

[Hyoretsu]

Yay, so I just wait for fasthax to be implement and then I can downgrade my 2ds on 11.2 without the need for dsiware or another 3ds with cfw? I'm not making this up am I ?

You wait the official release of fasthax, not beta or alpha. That'll be when other consoles aside N3DS will be supported.

 

[Yoluha]

is this real life? is it just fantasy?

That was on my mind, so dont stop me now.

Yes. Now wake up, you're late for work.

be on vacation 8*

 

[ARVI80]

you got ir right, son

Yup. Wait for SafeHax to implement FastHax code and you will be find.

You wait the official release of fasthax, not beta or alpha. That'll be when other consoles aside N3DS will be supported.

So excited, I think I need to check my underwear. Thanks nerds