<p>In order to exploit the Browser application, we need to bypass the browser version check, which is designed to disallow the use of the browser without updating to the latest system version.</p>
<p>A public proxy server is available, which, with the help of the SSLoth exploit, can bypass this check.</p>
<p>Once the bypass is active, an exploit webpage will be accessible which will do the rest of the job.</p>
<p>For technical details on the exploits that you will be using on this page, see <a href="https://github.com/MrNbaYoh/3ds-ssloth">here</a> (SSLoth) and <a href="https://github.com/TuxSH/universal-otherapp/">here</a> (universal-otherapp).</p>
SSLoth allows users on version 11.13.0 and below to bypass the browser version check, allowing the use of new-browserhax or old-browserhax (compatible with versions 11.4.0 through 11.13.0 in all regions), which can then be used in conjunction with universal-otherapp.
If you have updated your device to your current version using a cartridge, your Internet Browser will be inaccessible. If this is the case, you will need to update your device to the latest version through System Settings and then follow the method for the latest version.
{: .notice--warning}
### Qué necesitas
* The latest release of [SafeB9SInstaller](https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip) (direct download)
* The latest release of [boot9strap](https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip) (direct download)
* The latest release of [Luma3DS](https://github.com/LumaTeam/Luma3DS/releases/latest) (the Luma3DS `.zip` file)
* The latest release of [universal-otherapp](https://github.com/TuxSH/universal-otherapp/releases/latest) (`otherapp.bin`)
#### Sección I - Preparativos
In this section, you will copy the files needed to trigger both browserhax and universal-otherapp.
1. Apaga tu consola
1. Inserta tu tarjeta SD en tu computadora
1. Copy `otherapp.bin` to the root of your SD card and rename it to `arm11code.bin`
+ La raíz de tu tarjeta SD se refiere al primer directorio de la tarjeta, donde puedes ver la carpeta Nintendo 3DS pero no estás dentro de ella
+ If you do not see the `.bin` extension, do not add it to the end of the filename
1. Copia los archivos `boot.firm` y `boot.3dsx` desde el `.zip` de Luma3DS a la raíz de tu tarjeta SD
1. Crea una carpeta llamada `boot9strap` en la raíz de tu tarjeta SD
1. Copia `boot9strap.firm` y `boot9strap.firm.sha` desde el `.zip` de `boot9strap` a la carpeta `/boot9strap/` en tu tarjeta SD
1. Copia `SafeB9SInstaller.bin` desde el `.zip` de SafeB9SInstaller a la raíz de tu tarjeta SD
1. Vuelve a insertar tu tarjeta SD en tu consola
1. Enciende tu consola
#### Section II - SSLoth
In this section, you will change your Internet connection settings to use a proxy network designed to bypass the browser version check, allowing the browser to function without a system update. This will allow you to access the browser exploit webpage in the next section.
1. Launch the System Settings application
1. Navigate to `Internet Settings` -> `Connection Settings`
1. Click on your network connection slot and navigate to `Change Settings` -> `Next Page (right arrow)` -> `Proxy Settings`
1. Set "Proxy Settings" to "Yes", then click `Detailed Setup`
1. Set the Proxy Server to `192.9.234.11`, and the Port to `8080`
1. Click OK, then click Save
1. When prompted, click "Test" to perform the connection test
+ The test should succeed
1. Click "OK" to continue
1. Press "Back" twice, then "Close" to go back to the HOME Menu
#### Section III - Launching SafeB9SInstaller
In this section, you will visit the browser exploit webpage, which will use universal-otherapp to launch the boot9strap (custom firmware) installer.
1. On the HOME Menu, press the Left and Right shoulder buttons together to open the camera
+ If you are unable to open the camera, open the Internet Browser and manually type the URL instead (`https://zoogie.github.io/web/nbhax/`)
1. Tap the QR code button and scan [this QR code](http://api.qrserver.com/v1/create-qr-code/?color=000000&bgcolor=FFFFFF&data=https%3A%2F%2Fzoogie.github.io%2Fweb%2Fnbhax&qzone=1&margin=0&size=400x400&ecc=L)
+ If you get an error, [follow this troubleshooting guide](troubleshooting#installing-boot9strap-ssloth-browser)
1. Si el exploit ha funcionado, habrás iniciado SafeB9SInstaller
#### Section IV - Installing boot9strap
In this section, you will install custom firmware onto your device.
1. Cuando se te pida, introduce la combinación de botones mostrada para instalar boot9strap
1. Once it is complete, press (A) to reboot your device
1. Tu consola debería haber reiniciado en el menú de configuración de Luma3DS
+ If your device shuts down when you try to power it on, ensure that you have copied `boot.firm` from the Luma3DS `.zip` to the root of your SD card
1. Presiona (Start) para guardar y reiniciar
+ If you get an error, just continue to the next page
At this point, your console will boot to Luma3DS by default.
+ Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
+ On the next page, you will install useful homebrew applications to complete your setup.
#### Section V - Restoring default proxy
In this section, you will restore the Internet settings back to normal.
1. Launch the System Settings application
1. Navigate to `Internet Settings` -> `Connection Settings`
1. Click on your network connection slot and navigate to `Change Settings` -> `Next Page (right arrow)` -> `Proxy Settings`
1. Set "Proxy Settings" to "No"
1. Click OK, then click Save
1. When prompted, click "Test" to perform the connection test
+ The test should succeed
1. Apaga tu consola
___
### Continúa en [Finalizar instalación](finalizing-setup)
