<li><ahref="#site-nav"class="screen-reader-shortcut">Skip to primary navigation</a></li>
<li><ahref="#main"class="screen-reader-shortcut">Skip to content</a></li>
<li><ahref="#footer"class="screen-reader-shortcut">Skip to footer</a></li>
</ul>
</nav>
<!--[if lt IE 9]>
<divclass="notice--danger align-center"style="margin: 0;">You are using an <strong>outdated</strong> browser. Please <ahref="https://browsehappy.com/">upgrade your browser</a> to improve your experience.</div>
<![endif]-->
<divclass="masthead">
<divclass="masthead__inner-wrap">
<divclass="masthead__menu">
<navid="site-nav"class="greedy-nav">
<!-- hacks-guide change start: disable default masthead title -->
<p><ahref="https://github.com/zoogie/MSET9">MSET9</a> is an exploit for the System Settings application developed by <ahref="https://github.com/zoogie">zoogie</a>. It exploits a flaw where the ID1 (the second 32-character folder name inside of the Nintendo 3DS folder, inside of the ID0) can be <em>any</em> name as long as it is 32 characters. Performing a specific sequence of actions results in the console executing the instructions that are encoded into the ID1 folder name, which can be used to grant full control over the 3DS.</p>
</details>
<h3id="相容性資訊">相容性資訊</h3>
<pclass="notice--warning">This page requires a computer running Windows, Linux, or macOS. If you have an Android phone/tablet or a Chromebook, follow <ahref="installing-boot9strap-(mset9-play-store)">Installing boot9strap (MSET9 Play Store)</a> instead. If you do not have access to any of these devices, you will need to use an <ahref="https://wiki.hacks.guide/wiki/3DS:Alternate_Exploits">alternate exploit</a>.</p>
<h3id="必備項目">必備項目</h3>
<ul>
<li>The latest release of <ahref="https://github.com/zoogie/MSET9/releases/latest">MSET9</a> (the Release <codeclass="language-plaintext highlighter-rouge">.zip</code> file)</li>
<li>Any 3.x version of <ahref="https://www.python.org/downloads/">Python</a><strong>installed on your computer</strong>
<ul>
<li>If you are on Linux or macOS, you may already have Python 3. Check by opening a Terminal window and entering <codeclass="language-plaintext highlighter-rouge">python3 -V</code>. If this returns a version number, it will work for this guide.</li>
</ul>
</li>
</ul>
<h3id="操作說明">操作說明</h3>
<pclass="notice--info">On this page, you will use the MSET9 script, which is used to trigger MSET9. If you get a numbered error (e.g. Error 01) when running the script, the solution to that error can most likely be found on the <ahref="troubleshooting#installing-boot9strap-mset9">troubleshooting</a> page.</p>
<h4id="第一節--準備工作">第一節 — 準備工作</h4>
<p>In this section, you will prepare the SD card data necessary for the MSET9 exploit to trigger.</p>
<ol>
<li>Power on your console <strong>with your SD card inserted</strong></li>
<li>Open Mii Maker</li>
<li>Wait for your console to reach the “Welcome to Mii Maker” screen, then exit Mii Maker
<ul>
<li>You may see <ahref="/images/screenshots/mset9/mii-extdata.png">this screen</a>, which indicates the necessary data has been created</li>
<li>If you just reach the normal Mii Maker screen, exit Mii Maker and continue to the next step</li>
</ul>
</li>
<li>Power off your console</li>
<li>將 SD 卡插入至電腦中</li>
<li>
<p>Copy everything from the Release <codeclass="language-plaintext highlighter-rouge">.zip</code> to the root of your SD card, overwriting any existing files</p>
<li><strong>macOS</strong>: Double-click <codeclass="language-plaintext highlighter-rouge">mset9.command</code> and enter your password if prompted</li>
<li><strong>Linux</strong>: open a Terminal window, <codeclass="language-plaintext highlighter-rouge">cd</code> to the root of your SD card, then type <codeclass="language-plaintext highlighter-rouge">python3 mset9.py</code> and press Enter</li>
<h4id="section-ii---mset9">Section II - MSET9</h4>
<p>In this section, you will trigger MSET9 to launch SafeB9SInstaller (the custom firmware installer).</p>
<pclass="notice--danger">These instructions must be followed <strong>EXACTLY</strong>, so double-check EVERYTHING you are doing to avoid errors!</p>
<ol>
<li><strong><ahref="/images/screenshots/mset9/hover-settings.png">Hover over</a></strong> the System Settings icon using the D-Pad (do not select it yet)</li>
<li><strong>macOS</strong>: Double-click <codeclass="language-plaintext highlighter-rouge">mset9.command</code> and enter your password if prompted</li>
<li><strong>Linux</strong>: open a Terminal window, <codeclass="language-plaintext highlighter-rouge">cd</code> to the root of your SD card, then type <codeclass="language-plaintext highlighter-rouge">python3 mset9.py</code> and press Enter</li>
</ul>
</li>
<li>Type the number corresponding to your console model and version, then press Enter</li>
<li>In the MSET9 window, type <codeclass="language-plaintext highlighter-rouge">2</code>, then press Enter to inject MSET9
<ul>
<li>You should see “MSET9 successfully injected!”</li>
</ul>
</li>
<li>Press Enter to close the MSET9 script</li>
<li>Reinsert your SD card into your console <strong>without pressing any buttons or touching the screen</strong></li>
<li>如果一切成功的話，您將自動進入 SafeB9SInstaller
<ul>
<li>If you get a red screen or the console gets stuck on a loading screen, follow the <ahref="troubleshooting#installing-boot9strap-mset9">troubleshooting guide</a></li>
<p>In this section, you will install custom firmware onto your console.</p>
<ol>
<li>When prompted, input the key combo given on the top screen to install boot9strap
<ul>
<li>If a step on the lower screen has red-colored text, and you are not prompted to input a key combo, <ahref="troubleshooting#issues-with-safeb9sinstaller">follow this troubleshooting guide</a></li>
</ul>
</li>
<li>Once it is complete, press (A) to reboot your console</li>
<li>Your console should have booted into the Luma3DS configuration menu
<ul>
<li>Luma3DS configuration menu are settings for the Luma3DS custom firmware. Many of these settings may be useful for customization or debugging</li>
<li>For the purpose of this guide, <strong>leave these options on the default settings</strong> (do not check or uncheck anything)</li>
<li>If your console shuts down when you try to power it on, ensure that you have copied <codeclass="language-plaintext highlighter-rouge">boot.firm</code> from the Luma3DS <codeclass="language-plaintext highlighter-rouge">.zip</code> to the root of your SD card</li>
</ul>
</li>
<li>按『Start』鍵以存檔並重新啟動系統</li>
</ol>
<h4id="section-iv---removing-mset9">Section IV - Removing MSET9</h4>
<p>In this section, you will remove MSET9 to prevent further issues. (This will not remove the custom firmware that you just installed.)</p>
<pclass="notice--danger">Do NOT skip this section! If you skip it, applications may crash unexpectedly and you will encounter errors on the next page!</p>
<li><strong>macOS</strong>: Double-click <codeclass="language-plaintext highlighter-rouge">mset9.command</code> and enter your password if prompted</li>
<li><strong>Linux</strong>: open a Terminal window, <codeclass="language-plaintext highlighter-rouge">cd</code> to the root of your SD card, then type <codeclass="language-plaintext highlighter-rouge">python3 mset9.py</code> and press Enter</li>
</ul>
</li>
<li>Type the number corresponding to your console model and version, then press Enter</li>
<li>In the MSET9 window, type <codeclass="language-plaintext highlighter-rouge">3</code>, then press Enter to remove MSET9
<ul>
<li>You should see “Successfully removed MSET9!”</li>
</ul>
</li>
<li>Press Enter to close the MSET9 script</li>
</ol>
<p>At this point, your console will boot to Luma3DS by default.</p>
<ul>
<li>Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.</li>
<li>On the next page, you will install useful homebrew applications to complete your setup.</li>
</ul>
<hr/>
<pclass="notice--danger">Did you follow Section IV (Removing MSET9)? That section is MANDATORY!</p>
