"message": "Deze website gebruikt cookies om de voortgang op de zijbalk bij te houden en de site te verbeteren."
}
})});
</script>
<!-- end custom head snippets -->
</head>
<bodyclass="layout--single">
<navclass="skip-links">
<ul>
<li><ahref="#site-nav"class="screen-reader-shortcut">Skip to primary navigation</a></li>
<li><ahref="#main"class="screen-reader-shortcut">Skip to content</a></li>
<li><ahref="#footer"class="screen-reader-shortcut">Skip to footer</a></li>
</ul>
</nav>
<!--[if lt IE 9]>
<divclass="notice--danger align-center"style="margin: 0;">You are using an <strong>outdated</strong> browser. Please <ahref="https://browsehappy.com/">upgrade your browser</a> to improve your experience.</div>
<![endif]-->
<divclass="masthead">
<divclass="masthead__inner-wrap">
<divclass="masthead__menu">
<navid="site-nav"class="greedy-nav">
<!-- <a class="site-title" href="/">
3DS Hacks Guide
</a>
-->
<ulclass="visible-links">
<!-- modified to use multilang, guide-specific -->
<p>In order to exploit the SAFE_MODE firmware of our system, we need to inject an exploited WiFi profile.</p>
<p>To accomplish this, we can use the Download Play functionality of the game Mario Kart 7, using a 3DS with custom firmware already installed along with a custom game plugin.</p>
<p>This custom plugin will send a hacked payload to an unhacked console, which then exploits the system in order to inject the exploited WiFi profile into your connections list.</p>
<p>Once the WiFi profile has been injected, we will use SAFE_MODE, which is a recovery feature present on all 3DS consoles, to activate the exploited WiFi profile.</p>
<p>For a more technical explanation, see the following links for information on the kartdlphax and unSAFE_MODE exploits: <ahref="https://github.com/PabloMK7/kartdlphax">kartdlphax</a>, <ahref="https://github.com/zoogie/unSAFE_MODE/">unSAFE_MODE</a>.</p>
<p>Om deze instructies te volgen, heb je het volgende nodig:</p>
<ul>
<li>Een tweede 3DS met custom firmware (de <strong>bron 3DS</strong>) die dezelfde regio is als de 3DS die je probeert te veranderen (de <strong>doel 3DS</strong>)
<ul>
<li>The consoles must be USA, JPN, or EUR region consoles</li>
</ul>
</li>
<li>Een fysieke of digitale kopie van Mario Kart 7 dat dezelfde regio heeft als beide consoles</li>
<p>Op de <strong>target 3DS</strong> (de 3DS die je probeert te wijzigen):</p>
<ul>
<li>De nieuwste versie van <ahref="https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip">SafeB9SInstaller</a> (directe download)</li>
<li>De nieuwste versie van <ahref="https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip">boot9strap</a> (directe download)</li>
<li>De nieuwste versie van <ahref="https://github.com/LumaTeam/Luma3DS/releases/latest">standaard Luma3DS</a> (the Luma3DS <codeclass="language-plaintext highlighter-rouge">.zip</code> file)</li>
<li>The latest release of <ahref="https://github.com/zoogie/unSAFE_MODE/releases/latest">unSAFE_MODE</a> (the RELEASE <codeclass="language-plaintext highlighter-rouge">.zip</code> file)</li>
<p>In this section, you will see whether your shoulder buttons are working on your console. This will determine which method you will follow on the next page.</p>
<pclass="notice--warning">If the camera does not open, you cannot follow this method. If this is the case, join <ahref="https://discord.gg/MWxPgEp">Nintendo Homebrew on Discord</a> and ask, in English, for help.</p>
<p>In this section, you will set up your source 3DS (the 3DS with custom firmware) for delivery of the exploit data to the target 3DS.</p>
<ol>
<li>Plaats de SD-kaart van je <strong>bron 3DS</strong> in je computer</li>
<li>Kopieer Luma 3GX Loader Edition’s <codeclass="language-plaintext highlighter-rouge">boot.firm</code> naar de hoofdmap van de <strong>bron 3DS</strong>’s SD-kaart, die elk bestaand bestand vervangt
<ul>
<li>De hoofdmap van de SD-kaart verwijst naar de bovenste map van de SD-kaart, waarin je alle mappen op de SD-kaart kunt zien, waaronder de Nintendo 3DS map, zonder je in de Nintendo 3DS map te bevinden</li>
</ul>
</li>
<li>Kopieer kartdlphax’s <codeclass="language-plaintext highlighter-rouge">plugin.3gx</code> naar de volgende map op de <strong>bron 3DS</strong>’s SD-kaart, afhankelijk van de <strong>regio van je kopie van Mario Kart 7</strong>:
<li>Maak de <codeclass="language-plaintext highlighter-rouge">plugins</code> en <codeclass="language-plaintext highlighter-rouge">00040000...</code> mappen aan als ze nog niet bestaan</li>
</ul>
</li>
<li>Haal de SD-kaart uit en stop deze in de <strong>bron 3DS</strong></li>
<p>In this section, you will copy the files needed to trigger the unSAFE_MODE exploit onto your target 3DS (the 3DS that you are trying to modify)’s SD card.</p>
<ol>
<li>Plaats de SD-kaart van je <strong>doel 3DS</strong> in je computer</li>
<li>Kopieer <codeclass="language-plaintext highlighter-rouge">boot.firm</code> en <codeclass="language-plaintext highlighter-rouge">boot.3dsx</code> van de standaard Luma3DS <codeclass="language-plaintext highlighter-rouge">.zip</code> naar de hoofdmap van je SD-kaart</li>
<li>Maak een map genaamd <codeclass="language-plaintext highlighter-rouge">boot9strap</code> op de hoofdmap van je SD-kaart</li>
<li>Kopieer <codeclass="language-plaintext highlighter-rouge">boot9strap.firm</code> en <codeclass="language-plaintext highlighter-rouge">boot9strap.firm.sha</code> van de boot9strap <codeclass="language-plaintext highlighter-rouge">.zip</code> naar de <codeclass="language-plaintext highlighter-rouge">/boot9strap/</code> map op je SD-kaart</li>
<li>Kopieer <codeclass="language-plaintext highlighter-rouge">SafeB9SInstaller.bin</code> van de SafeB9SInstaller <codeclass="language-plaintext highlighter-rouge">.zip</code> naar de hoofdmap van je SD-kaart</li>
<li>Copy <codeclass="language-plaintext highlighter-rouge">usm.bin</code> from the unSAFE_MODE <codeclass="language-plaintext highlighter-rouge">.zip</code> to the root of your SD card</li>
<li>Create a folder called <codeclass="language-plaintext highlighter-rouge">3ds</code> on the root of your SD card</li>
<li>Copy the <codeclass="language-plaintext highlighter-rouge">slotTool</code> folder from the unSAFE_MODE <codeclass="language-plaintext highlighter-rouge">.zip</code> to the <codeclass="language-plaintext highlighter-rouge">3ds</code> folder on your SD card</li>
<li>Haal de SD-kaart uit en stop deze in de <strong>doel 3DS</strong></li>
<p>In this section, you will use Download Play to transfer the exploit data from the source 3DS to the target 3DS, which can be used to overwrite your Wi-Fi slots with hacked data. Your Wi-Fi connection settings will be temporarily overwritten while the exploit is active.</p>
<ol>
<li>Zet de <strong>bron 3DS</strong> aan
<ul>
<li>Als je gevraagd wordt om Luma3DS in te stellen, druk gewoon op START om de configuratie op te slaan</li>
<li>If you have launched kartdlphax previously, the last selected settings will be loaded. If they are correct, select <codeclass="language-plaintext highlighter-rouge">Use settings</code> and skip the next 3 steps. If they are incorrect, select <codeclass="language-plaintext highlighter-rouge">Change settings</code> and proceed.</li>
<li>A confirmation menu will show up. If the settings shown on the top screen are correct, select <codeclass="language-plaintext highlighter-rouge">Use settings</code>
<ul>
<li>If the settings are not correct, press <codeclass="language-plaintext highlighter-rouge">Change settings</code> and modify them accordingly</li>
<li>Als de bron 3DS op dit moment bevriest en je een cartridge gebruikt, probeer dan <ahref="dumping-titles-and-game-cartridges#installing-a-game-cartridge-direct naar-het systeem">het cartridge te installeren naar het systeem</a></li>
</ul>
</li>
<li>Zet de <strong>doel 3DS</strong> aan
<ul>
<li>Zorg ervoor dat draadloze verbinding is ingeschakeld</li>
</ul>
</li>
<li>Op de <strong>doel 3DS</strong>, open de Download Play applicatie (<imgsrc="https://3ds.hacks.guide/images/download-play-icon.png"alt=""height="24px"width="24px"/>), selecteer dan “Nintendo 3DS”</li>
<li>Word lid van de groep gemaakt door de <strong>bron 3DS</strong></li>
<li>Selecteer “Start” op de <strong>bron 3DS</strong> zodra de <strong>doel 3DS</strong> is gedetecteerd</li>
<li>Zodra multiplayer is geladen, navigeer naar <codeclass="language-plaintext highlighter-rouge">Grand Prix</code> -><codeclass="language-plaintext highlighter-rouge">50cc</code> -> (any driver) -><codeclass="language-plaintext highlighter-rouge">Mushroom Cup</code> -><codeclass="language-plaintext highlighter-rouge">OK</code></li>
<li>Wacht een tijdje (een percentage moet worden weergegeven op de <strong>bron 3DS</strong>)</li>
<li>If the exploit was successful, the <strong>target 3DS</strong> will have booted into the 3DS ROP xPloit Injector
<ul>
<li>If the exploit was not successful, power off the <strong>source 3DS</strong> and <strong>target 3DS</strong> and start again from the beginning of <codeclass="language-plaintext highlighter-rouge">Section III - kartdlphax</code></li>
</ul>
</li>
<li>Press (X) to inject unSAFE_MODE</li>
<li>If the injection was successful, the screen will turn green and the <strong>target 3DS</strong> will automatically power off
<ul>
<li>If the screen turns red, power off the target 3DS and start again from the beginning of <codeclass="language-plaintext highlighter-rouge">Section III - kartdlphax</code>. If this doesn’t work, ask for help at <ahref="https://discord.gg/MWxPgEp">Nintendo Homebrew on Discord</a>)</li>
</ul>
</li>
</ol>
<pclass="notice--info">You will <strong>not</strong> need to use your <strong>source 3DS</strong> to complete any further steps on this guide. Any further steps should only be completed on the <strong>target 3DS</strong>.</p>
<p>In this section, you will enter Safe Mode (a feature available on all 3DS family consoles) and navigate to a menu where unSAFE_MODE will be triggered, which will launch you into the boot9strap (custom firmware) installer.</p>
<li>With your console still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your console
<li>There is no update. This is part of the exploit</li>
</ul>
</li>
<li>Press “I accept” to accept the terms and conditions</li>
<li>The update will eventually fail, with the error code <codeclass="language-plaintext highlighter-rouge">003-1099</code>. This is intended behaviour</li>
<li>When asked “Would you like to configure Internet settings?”, select “Yes”</li>
<li>On the following menu, navigate to <codeclass="language-plaintext highlighter-rouge">Connection 1</code> -><codeclass="language-plaintext highlighter-rouge">Change Settings</code> -><codeclass="language-plaintext highlighter-rouge">Next Page (right arrow)</code> -><codeclass="language-plaintext highlighter-rouge">Proxy Settings</code> -><codeclass="language-plaintext highlighter-rouge">Detailed Setup</code> (<ahref="/images/screenshots/usm/safemode_highlighted.png">image</a>)</li>
<li>If your console instead freezes on a white screen, hold the POWER button until it turns off, then retry this section</li>
<li>If your console instead freezes on a red screen, you are missing <codeclass="language-plaintext highlighter-rouge">usm.bin</code> from the root of your SD card</li>
<li>If a step on the lower screen has red-colored text, and you are not prompted to input a key combo, <ahref="troubleshooting#issues-with-safeb9sinstaller">follow this troubleshooting guide</a></li>
<li>If your console shuts down when you try to power it on, ensure that you have copied <codeclass="language-plaintext highlighter-rouge">boot.firm</code> from the Luma3DS <codeclass="language-plaintext highlighter-rouge">.zip</code> to the root of your SD card</li>
<p>In this section, you will enter the Homebrew Launcher (using custom firmware) so that you can restore the Wi-Fi connection slots that were overwritten in Section I.</p>
<ol>
<li>Open de Download Play app</li>
<li>Wacht tot je de twee knoppen ziet
<ul>
<li>Do not press either of the buttons</li>
</ul>
</li>
<li>Druk tegelijkertijd op (L) + (Down) + (Select) om het Rosalina menu te openen</li>
<li>Selecteer “Miscellaneous options”</li>
<li>Selecteer “Switch the hb. title to the current app.”</li>
<li>Druk op (B) om door te gaan</li>
<li>Druk op (B) om terug te gaan naar het Rosalina hoofdmenu</li>
<li>Druk op (B) om het Rosalina menu af te sluiten</li>
<li>Druk op (Home), en sluit dan Download Play af</li>
