It's here!

​

Info

@Normmatt has created a way to run B9S .firm files from bootrom via a DSi Flashcard and a magnet! This works on every 3DS on any firmware version.

For installation without a PC, user @TheCyberQuake has created a pack which will automatically install B9S and copy over essential starter homebrew from the flashcard's SD to the 3DS's. This will mainly be used for PC-less B9S installations. If you have a PC with you, use 3ds.guide. Read more here: https://gbatemp.net/threads/481141/

How does this work?

This works because of a flaw in the bootrom. Before the bootrom boots the NAND, it checks to see if Start+Select+X is held down, and if the shell is closed. If these requirements are met, it will boot an NDS cartridge from the bootrom. This give that cartridge bootrom access. You might be wondering how you'd hold down buttons while the shell is closed, and why you need a magnet. If you put a magnet in a specific spot on the 3DS, it will go into sleep mode. Using this, you can boot the NDS cartridge with the buttons held down while in sleep mode! Using a reflashable flashcard, you can boot B9SInstaller using the flashcard, and easily install it on your 3DS.

The 2DS doesn't need a magnet since a switch puts it to sleep instead of a magnet.

What does this mean?

1. Any 3DS model on any firmware can be hacked with minimal effort
2. You can unbrick any 3DS model from any type of brick.
   - Remember, you don't need a NAND backup for this. Just do a CTRTransfer.
   - This does not apply to MCU bricks.
3. Even consoles with fried NAND, or even the NAND chip physically removed, can use this

This is incredibly impressive stuff, and will most likely be released soon! edit: now!

FAQ

Q: Can Nintendo patch this?
A: Nope! Not without a new hardware revision.

Q: My flashcard is blocked by my firmware! Can I still use this?
A: Yes! The flashcard blacklist is not enabled on the bootrom.

Q: Why can't this work with my flashcard?
A: The installation requires you to flash NTRBoot to the flashcard's nand. Most DS flashcards, such as the original R4, have a ROM, which is not flashable.

Q: Can I install NTRBoot on my flashcard without another 3DS system?
A: If you can run NDS roms on your 3DS with it, then yes. If it's blocked on your 3DS version, then you'll need another 3DS system to use it.

Q: Will my 3DS flashcard work?
A: No, only the NDSi flashcards listed above.

Q: Will any other flash cards work?
A: Only the ones listed in the OP. However keep in mind that flashcards such as the DSTT, Supercard DS2 and R4 SDHC Dualcore are planned to be supported in the future.

Q: I tried to do this with my cartridge and it didn't work?
A: It doesn't work with regular DS cards.

Q: Can I unbrick from a ____ brick?
A: Considering the card has access to the bootrom, yes! This can unbrick any brick (except MCU), unless you've taken a knife to the motherboard.

Q: Can I install B9S on the latest firmware with this?
A: Again, since the card has access to the bootrom, you can do this easily! Just plug in your flashcard, boot up using the magnet and button combination, and install.

Q: Does this work on the New Nintendo 2DS XL?
A: Yes!

Release
Guide
Free NTRBoot Flashing
Free B9S Installations

Here is SciresM's post about this

Please see SciresM's presentation on bootromhax.​

 

[Deleted member 414991]

The guide on 3ds.guide says you need a 3ds thats already running cfw to do this. So ppl are still SOL if they only have one stock 3ds?

Yeah, but people are starting to sell pre-flashed cards.

--------------------- MERGED ---------------------------

Does this card work? I have the 2016 version

no

 

[Dr. Dew]

I see, I see. Was just wondering. I have a spare AceKard i might use for this in case of some terrible brick or something.

 

[Plstic]

Or you could just pay more attention to what you're reading. It's clearly labeled as "planned". Are you honestly that daft? No I'm not trying to be rude but that was seriously an idiotic comment. "Take it off because we're too dumb to read!"...... Wow.

As you can see I have a higher resolution monitor than most people.

Spoiler

 

[Majickhat55]

I think you just described typical noob.

I mean true, but not all of them are completely oblivious to stuff right in their face. Others however, are the type that look up "gullible" in the dictionary because someone told them it wasn't a word.

 

[Cuphat]

The guide on 3ds.guide says you need a 3ds thats already running cfw to do this. So ppl are still SOL if they only have one stock 3ds?

If you have an AK2i and an original DS (not DSi), d3m3vilurr has a .nds flasher. Powersaves support is also supposedly planned.

 

[Rxtom]

what are the chances for the DSonei (the prior to DStwo) which was a re writeable firmware card be supported in the future ?

 

[zoogie]

Has anybody tried this?
https://github.com/d3m3vilurr/ak2i_ntrcardhax_flasher
https://github.com/d3m3vilurr/ak2i_ntrcardhax_flasher/releases/tag/v2.0

It's a DSphat/Lite flasher for ak2i ntrboot.
@d3m3vilurr released it just a few hours ago.
Guess he was too shy to make a thread or post.

 

[Deleted member 414991]

what are the chances for the DSonei (the prior to DStwo) which was a re writeable firmware card be supported in the future ?

It doesn't.

 

[Majickhat55]

As you can see I have a higher resolution monitor than most people.

And mine is 2160p, and it's still RIGHT there in the middle of the screen Lol. I'm just giving you a hard time man, I really don't think you're that dumb We're all human haha.

 

[Deleted member 414991]

@Plstic there is still a space between the two sections. It would have been easy to properly look.

 

[Rxtom]

It doesn't.

well, that's a sad and previsible thing I think. althought I don't need this method, could come in hand at any moment.

 

[DeadlyFoez]

I used my iPad Smart Cover lol!!!

At first I lol'd, but then I reread it and said "fricken owns an ipad".
j/k

 

[DarkDante]

At first I lol'd, but then I reread it and said "fricken owns an ipad".
j/k

Lol really works

 

[Jayro]

Ordered my R4i Gold 3DS (RTS) yesterday (my other two were stolen last December). Wesley is a cool guy.






I am sad that I never got to backup and save my Krewella "Get Wet" WoodR4 theme, but oh well, lesson learned. Also lost the 16GB cards they had in them too.

 

[Kioku]

Ordered my R4i Gold 3DS (RTS) yesterday (my other two were stolen last December).

View attachment 95619




I am sad that I never got to backup and save my Krewella "Get Wet" WoodR4 theme, but oh well, lesson learned. Also lost the 16GB cards they had in them too.

Ordered from them. Their service is janky as all hell. No confirmation of payment received which irks the hell out of me.

 

[codezer0]

Does this include the Blue Kart included with the GW 3DS of the day? This would be a great thing to be able to flash it and make it a useful rescue tool.

 

[zoogie]

https://twitter.com/hedgeberg/status/896904515999461376
1. I never claimed to be a part of the "dev process".
2. I have had a beta since June 2. That is a fact and I can prove it privately if @hedgeberg wishes to talk to me.

 

[Pluupy]

Holy shit this is crazy! 3DS hacking scene is absolutely glorious.

 

[Kioku]

https://twitter.com/hedgeberg/status/896904515999461376
1. I never claimed to be a part of the "dev process".
2. I have had a beta since June 2. That is a fact and I can prove it privately if @hedgeberg wishes to talk to me.

Those posts make him seem like a drama queen.

 

[.Chris]

I'm on this step, and I do not see "ntrboot_flasher" on the selection screen of Luma3DS.