New Crowdin updates (#2111)
* New translations installing-boot9strap-(fredtool).txt (Spanish) * New translations installing-boot9strap-(fredtool).txt (Romanian) * New translations seedminer.txt (Romanian) * New translations installing-boot9strap-(usm).txt (Romanian) * New translations installing-boot9strap-(fredtool).txt (French) * New translations installing-boot9strap-(usm).txt (French) * New translations seedminer.txt (French) * New translations installing-boot9strap-(usm).txt (Korean) * New translations troubleshooting.txt (Korean) * New translations seedminer.txt (Spanish) * New translations installing-boot9strap-(fredtool).txt (Catalan) * New translations seedminer.txt (Catalan) * New translations installing-boot9strap-(usm).txt (Catalan) * New translations installing-boot9strap-(fredtool).txt (Czech) * New translations seedminer.txt (Czech) * New translations installing-boot9strap-(usm).txt (Czech) * New translations installing-boot9strap-(usm).txt (Spanish) * New translations installing-boot9strap-(usm).txt (Arabic) * New translations installing-boot9strap-(fredtool).txt (Arabic) * New translations seedminer.txt (Arabic) * New translations installing-boot9strap-(fredtool).txt (Bulgarian) * New translations seedminer.txt (Bulgarian) * New translations installing-boot9strap-(usm).txt (Bulgarian) * New translations installing-boot9strap-(fredtool).txt (Hebrew) * New translations installing-boot9strap-(usm).txt (Finnish) * New translations installing-boot9strap-(usm).txt (Hebrew) * New translations seedminer.txt (Hebrew) * New translations installing-boot9strap-(fredtool).txt (Hungarian) * New translations seedminer.txt (Finnish) * New translations installing-boot9strap-(fredtool).txt (Finnish) * New translations installing-boot9strap-(fredtool).txt (German) * New translations seedminer.txt (German) * New translations installing-boot9strap-(usm).txt (German) * New translations installing-boot9strap-(fredtool).txt (Greek) * New translations seedminer.txt (Greek) * New translations installing-boot9strap-(usm).txt (Greek) * New translations seedminer.txt (Hungarian) * New translations installing-boot9strap-(usm).txt (Hungarian) * New translations installing-boot9strap-(usm).txt (Japanese) * New translations installing-boot9strap-(fredtool).txt (Japanese) * New translations installing-boot9strap-(fredtool).txt (Korean) * New translations seedminer.txt (Korean) * New translations seedminer.txt (Japanese) * New translations installing-boot9strap-(fredtool).txt (Italian) * New translations seedminer.txt (Italian) * New translations installing-boot9strap-(usm).txt (Italian) * New translations installing-boot9strap-(fredtool).txt (Dutch) * New translations installing-boot9strap-(usm).txt (Dutch) * New translations seedminer.txt (Dutch) * New translations installing-boot9strap-(fredtool).txt (Norwegian) * New translations installing-boot9strap-(fredtool).txt (Russian) * New translations seedminer.txt (Russian) * New translations installing-boot9strap-(usm).txt (Russian) * New translations installing-boot9strap-(fredtool).txt (Swedish) * New translations seedminer.txt (Swedish) * New translations installing-boot9strap-(usm).txt (Swedish) * New translations seedminer.txt (Norwegian) * New translations seedminer.txt (Polish) * New translations installing-boot9strap-(usm).txt (Norwegian) * New translations installing-boot9strap-(fredtool).txt (Polish) * New translations installing-boot9strap-(usm).txt (Polish) * New translations installing-boot9strap-(usm).txt (Portuguese) * New translations installing-boot9strap-(fredtool).txt (Portuguese) * New translations seedminer.txt (Portuguese) * New translations seedminer.txt (Ukrainian) * New translations installing-boot9strap-(usm).txt (Chinese Simplified) * New translations seedminer.txt (Chinese Simplified) * New translations installing-boot9strap-(fredtool).txt (Chinese Simplified) * New translations installing-boot9strap-(usm).txt (Ukrainian) * New translations installing-boot9strap-(fredtool).txt (Ukrainian) * New translations installing-boot9strap-(usm).txt (Turkish) * New translations seedminer.txt (Turkish) * New translations installing-boot9strap-(fredtool).txt (Turkish) * New translations installing-boot9strap-(usm).txt (Chinese Traditional) * New translations seedminer.txt (Chinese Traditional) * New translations installing-boot9strap-(fredtool).txt (Chinese Traditional) * New translations installing-boot9strap-(fredtool).txt (Vietnamese) * New translations seedminer.txt (Vietnamese) * New translations installing-boot9strap-(fredtool).txt (Thai) * New translations seedminer.txt (Thai) * New translations installing-boot9strap-(usm).txt (Thai) * New translations installing-boot9strap-(fredtool).txt (Croatian) * New translations seedminer.txt (Croatian) * New translations installing-boot9strap-(usm).txt (Croatian) * New translations installing-boot9strap-(usm).txt (Vietnamese) * New translations installing-boot9strap-(usm).txt (Portuguese, Brazilian) * New translations installing-boot9strap-(fredtool).txt (Portuguese, Brazilian) * New translations seedminer.txt (Portuguese, Brazilian) * New translations installing-boot9strap-(fredtool).txt (Indonesian) * New translations seedminer.txt (Indonesian) * New translations installing-boot9strap-(usm).txt (Indonesian) * New translations bannerbomb3.txt (Romanian) * New translations installing-boot9strap-(fredtool).txt (Malay) * New translations seedminer.txt (Malay) * New translations installing-boot9strap-(usm).txt (Malay) * New translations installing-boot9strap-(fredtool).txt (Pirate English) * New translations seedminer.txt (Pirate English) * New translations installing-boot9strap-(usm).txt (Pirate English) * New translations bannerbomb3.txt (Spanish) * New translations bannerbomb3.txt (Arabic) * New translations bannerbomb3.txt (French) * New translations bannerbomb3.txt (Catalan) * New translations bannerbomb3.txt (Bulgarian) * New translations bannerbomb3.txt (Czech) * New translations bannerbomb3.txt (Greek) * New translations bannerbomb3.txt (German) * New translations bannerbomb3.txt (Hebrew) * New translations bannerbomb3.txt (Hungarian) * New translations bannerbomb3.txt (Finnish) * New translations bannerbomb3.txt (Japanese) * New translations bannerbomb3.txt (Korean) * New translations bannerbomb3.txt (Italian) * New translations bannerbomb3.txt (Norwegian) * New translations bannerbomb3.txt (Polish) * New translations bannerbomb3.txt (Dutch) * New translations bannerbomb3.txt (Russian) * New translations bannerbomb3.txt (Portuguese) * New translations bannerbomb3.txt (Ukrainian) * New translations bannerbomb3.txt (Swedish) * New translations bannerbomb3.txt (Turkish) * New translations bannerbomb3.txt (Chinese Simplified) * New translations bannerbomb3.txt (Chinese Traditional) * New translations bannerbomb3.txt (Vietnamese) * New translations bannerbomb3.txt (Indonesian) * New translations bannerbomb3.txt (Portuguese, Brazilian) * New translations bannerbomb3.txt (Malay) * New translations bannerbomb3.txt (Croatian) * New translations bannerbomb3.txt (Thai) * New translations troubleshooting.txt (French) * New translations troubleshooting.txt (Spanish) * New translations troubleshooting.txt (Romanian) * New translations bannerbomb3.txt (Pirate English) * New translations troubleshooting.txt (Czech) * New translations troubleshooting.txt (Arabic) * New translations troubleshooting.txt (German) * New translations troubleshooting.txt (Bulgarian) * New translations troubleshooting.txt (Catalan) * New translations troubleshooting.txt (Hebrew) * New translations troubleshooting.txt (Hungarian) * New translations troubleshooting.txt (Greek) * New translations troubleshooting.txt (Finnish) * New translations troubleshooting.txt (Italian) * New translations troubleshooting.txt (Japanese) * New translations troubleshooting.txt (Norwegian) * New translations troubleshooting.txt (Dutch) * New translations troubleshooting.txt (Swedish) * New translations troubleshooting.txt (Turkish) * New translations troubleshooting.txt (Russian) * New translations troubleshooting.txt (Polish) * New translations troubleshooting.txt (Portuguese) * New translations troubleshooting.txt (Chinese Simplified) * New translations troubleshooting.txt (Ukrainian) * New translations troubleshooting.txt (Vietnamese) * New translations troubleshooting.txt (Chinese Traditional) * New translations troubleshooting.txt (Croatian) * New translations troubleshooting.txt (Malay) * New translations troubleshooting.txt (Portuguese, Brazilian) * New translations troubleshooting.txt (Indonesian) * New translations troubleshooting.txt (Thai) * New translations troubleshooting.txt (Pirate English)
This commit is contained in:
ihaveahax
GitHub
parent
8dfdf5acc2
commit
7224db8ef1
160 changed files with 2467 additions and 2179 deletions
|
|
@ -6,8 +6,8 @@ title: "BannerBomb3"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>To dump system DSiWare, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system in order to dump the DSi Internet Settings application to the SD root.</p>
|
||||
<p>To launch custom code, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system.</p>
|
||||
<p>For a more technical explanation, see <a href="https://github.com/zoogie/Bannerbomb3">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
|
@ -27,38 +27,43 @@ If you have a Taiwanese console (indicated by a T after the system version), fol
|
|||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 exploit onto your device's SD card.
|
||||
|
||||
1. Open [BannerBomb3 Tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php) on your computer
|
||||
1. Upload your movable.sed using the "Choose File" option
|
||||
1. Click "Build and Download"
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` inside of a zip file (`BannerBomb3.zip`)
|
||||
1. If your console is powered on, power off your console
|
||||
1. Power off your device
|
||||
1. Insert your SD card into your computer
|
||||
1. Open [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen) on your computer
|
||||
1. Upload your movable.sed using the “Choose File” option
|
||||
1. Click “Build and Download”
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a payload called `bb3.bin` inside of a zip archive (`DSIWARE_EXPLOIT.zip`)
|
||||
1. Copy `bb3.bin` from `DSIWARE_EXPLOIT.zip` to the root of your SD card
|
||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `BannerBomb3.zip` to the `Nintendo DSiWare` folder
|
||||
1. Copy the `F00D43D5.bin` file from `DSIWARE_EXPLOIT.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
#### Section II - Hardware Button Check
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next page.
|
||||
In this section, you will test the SAFE_MODE function of your device. This will determine which method you will follow in the next page.
|
||||
|
||||
1. Reinsert your SD card into your device
|
||||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare` -> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your system should flash Magenta (pink/purple) and then crash a few seconds later. This means it worked
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
1. If prompted to update, press Cancel
|
||||
+ If the device boots to the HOME Menu, just continue to the next step
|
||||
1. Power off your device
|
||||
1. Insert your SD card into your computer
|
||||
1. You should now have `42383841.bin` on the root of your SD card. Copy this file to somewhere on your computer, as you will use it on the next page
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
1. Delete `F00D43D5.bin` from your Nintendo DSiWare folder and from your computer. This file will not be needed anymore
|
||||
|
||||
___
|
||||
|
||||
Continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
### Next steps: Choose an exploit
|
||||
|
||||
If your device booted into Safe Mode and prompted to you to do a system update in Section II, Safe Mode is working on your device.
|
||||
|
||||
If your device booted into Safe Mode, continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
{: .notice--primary}
|
||||
|
||||
If your device did NOT boot into Safe Mode, continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
{: .notice--warning}
|
||||
|
|
|
|||
|
|
@ -6,14 +6,13 @@ title: "Installing boot9strap (Fredtool)"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application. This requires you to have a DSiWare backup, which you should have gotten in the previous section.</p>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application.</p>
|
||||
<p>This is a currently working implementation of the "FIRM partitions known-plaintext" exploit detailed <a href="https://www.3dbrew.org/wiki/3DS_System_Flaws">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
||||
### What You Need
|
||||
|
||||
* A DSiWare Backup, normally `42383841.bin` (You should have one on the root of your SD card from following [BannerBomb3](bannerbomb3))
|
||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||
* The latest release of [Frogminer_save](https://github.com/zoogie/Frogminer/releases/latest) (`Frogminer_save.zip`)
|
||||
* The latest release of [b9sTool](https://github.com/zoogie/b9sTool/releases/latest) (`boot.nds`)
|
||||
|
|
@ -27,17 +26,32 @@ As an additional safety measure, we will perform an additional check for custom
|
|||
1. Hold the (Select) button
|
||||
1. Power on your device while still holding the (Select) button
|
||||
1. If the check was successful, you will boot to the HOME Menu and you may proceed with this guide
|
||||
1. Power off your device
|
||||
|
||||
If you see a configuration menu, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
If you see a configuration menu or the console immediately powers off, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
{: .notice--danger}
|
||||
|
||||
#### Section II - Prep Work
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next section.
|
||||
|
||||
1. Reinsert your SD card into your device
|
||||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-fredtool)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Dump DSiWare"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - Prep Work
|
||||
|
||||
In this section, you will copy the files necessary to temporarily replace DS Connection Settings with Flipnote Studio, which is used to launch the boot9strap (custom firmware) installer.
|
||||
|
||||
1. Insert your SD card into your computer
|
||||
1. Open the [DSIHaxInjector_new](https://jenkins.nelthorya.net/job/DSIHaxInjector_new/build?delay=0sec) website on your computer
|
||||
1. Under the "Username" field, enter any alphanumeric name (no spaces or special characters)
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file using the first "Browse..." option
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file from the root of your SD card using the first "Browse..." option
|
||||
1. Under the "MovableSed" field, upload your `movable.sed` file using the second "Browse..." option
|
||||
1. Under the "InjectionTarget" field, set the injection target to `DSinternet` (NOT memorypit)
|
||||
1. Click "Build"
|
||||
|
|
@ -46,7 +60,6 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
1. Click on the first search result
|
||||
+ This result should have the latest timestamp
|
||||
1. Click the "output_(name).zip" link
|
||||
1. Insert your SD card into your computer
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
|
|
@ -60,7 +73,7 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
![]({{ "/images/screenshots/fredtool-root-layout.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section III - Overwriting DS Connection Settings
|
||||
#### Section IV - Overwriting DS Connection Settings
|
||||
|
||||
In this section, you will copy the hacked DS Connection Settings DSiWare to internal memory, which will temporarily replace it with Flipnote Studio.
|
||||
|
||||
|
|
@ -73,7 +86,7 @@ In this section, you will copy the hacked DS Connection Settings DSiWare to inte
|
|||
1. Navigate to `Internet Settings` -> `Nintendo DS Connections`, then select "OK" ([image](/images/screenshots/fredtool/dsconnection.png))
|
||||
1. If the exploit was successful, your device will have loaded the JPN version of Flipnote Studio
|
||||
|
||||
#### Section IV - Flipnote Exploit
|
||||
#### Section V - Flipnote Exploit
|
||||
|
||||
If you would prefer a visual guide to this section, one is available [here](https://zoogie.github.io/web/flipnote_directions/).
|
||||
{: .notice--info}
|
||||
|
|
@ -99,7 +112,7 @@ In this section, you will perform a series of very specific steps within Flipnot
|
|||
+ If your device shuts down when you try to power it on, ensure that you have copied `boot.firm` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ If you see the Luma Configuration screen, press (Start) to reboot, then continue with the guide
|
||||
|
||||
#### Section V - Luma3DS Verification
|
||||
#### Section VI - Luma3DS Verification
|
||||
|
||||
Due to the nature of the exploit used, it is occasionally (but rarely) possible for boot9strap to not actually get installed. This section will therefore verify that boot9strap was successfully installed by seeing if some files that are normally automatically generated by Luma3DS were created.
|
||||
|
||||
|
|
@ -113,9 +126,9 @@ At this point, your console will boot to Luma3DS by default.
|
|||
+ Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
|
||||
+ On the next page, you will install useful homebrew applications to complete your setup.
|
||||
|
||||
#### Section VI - Restoring DS Connection Settings
|
||||
#### Section VII - Restoring DS Connection Settings
|
||||
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section III.
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section IV.
|
||||
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
1. Copy the `42383841.bin` file from the `clean` folder of the downloaded DSiWare archive (output_(name).zip) to the `Nintendo DSiWare` folder, replacing the existing one
|
||||
|
|
|
|||
|
|
@ -18,45 +18,28 @@ title: "Installing boot9strap (USM)"
|
|||
|
||||
These instructions work on USA, Europe, Japan, and Korea region consoles as indicated by the letters U, E, J, or K after the system version.
|
||||
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
{: .notice--warning}
|
||||
|
||||
### What You Need
|
||||
|
||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||
* The latest release of [SafeB9SInstaller](https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip) (direct download)
|
||||
* The latest release of [boot9strap](https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip) (direct download)
|
||||
* The latest release of [Luma3DS](https://github.com/LumaTeam/Luma3DS/releases/latest) (the Luma3DS `.zip` file)
|
||||
* The latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/download/v1.3/usm.bin) (direct download)
|
||||
|
||||
|
||||
#### Section I - Prep Work
|
||||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 and unSAFE_MODE exploits onto your device's SD card.
|
||||
In this section, you will copy the files needed to trigger the unSAFE_MODE exploit onto your device's SD card.
|
||||
|
||||
1. If your device is powered on, power off your device
|
||||
1. Open [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php) on your computer
|
||||
1. Upload your movable.sed using the "Choose File" option
|
||||
1. Click "Build and Download"
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a SAFE_MODE exploit data file called `usm.bin` inside of a zip archive (`unSAFE_MODE.zip`)
|
||||
1. Insert your SD card into your computer
|
||||
1. Your SD card should be inserted in your computer
|
||||
1. Copy `boot.firm` and `boot.3dsx` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||
1. Create a folder named `boot9strap` on the root of your SD card
|
||||
1. Copy `boot9strap.firm` and `boot9strap.firm.sha` from the boot9strap `.zip` to the `/boot9strap/` folder on your SD card
|
||||
1. Copy `SafeB9SInstaller.bin` from the SafeB9SInstaller `.zip` to the root of your SD card
|
||||
1. Copy `usm.bin` from `unSAFE_MODE.zip` to the root of your SD card
|
||||
![]({{ "/images/screenshots/bb3/usm-root-layout.png" | absolute_url }}){: .notice--info}
|
||||
![]({{ "/images/screenshots/boot9strap-folder.png" | absolute_url }}){: .notice--info}
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `unSAFE_MODE.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
1. Copy `usm.bin` to the root of your SD card
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
|
|
@ -66,9 +49,9 @@ In this section, you will trigger the BannerBomb3 exploit using the DSiWare Mana
|
|||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-usm-menu)
|
||||
1. Press (A) to select "Inject haxx"
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-usm)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Install unSAFE_MODE"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - unSAFE_MODE
|
||||
|
|
@ -77,7 +60,7 @@ In this section, you will enter Safe Mode (a feature available on all 3DS family
|
|||
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of BannerBomb3](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
1. Press "OK" to accept the update
|
||||
+ There is no update. This is part of the exploit
|
||||
1. Press "I accept" to accept the terms and conditions
|
||||
|
|
@ -107,8 +90,7 @@ In this section, you will trigger the BannerBomb3 exploit a second time so that
|
|||
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Restore slots"
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Uninstall unSAFE_MODE"
|
||||
+ Your device will automatically reboot
|
||||
1. Power off your device
|
||||
1. Insert your SD card into your computer
|
||||
|
|
|
|||
|
|
@ -56,6 +56,7 @@ In this section, you will use the Bruteforce Movable website to retrieve your de
|
|||
+ If you are still waiting after half an hour, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask (in English) for someone there to assist you
|
||||
1. When the process is completed, download your `movable.sed` file from the site
|
||||
+ Keep this file as you will need it in the upcoming pages
|
||||
1. Power off your device
|
||||
|
||||
___
|
||||
|
||||
|
|
@ -63,11 +64,11 @@ ___
|
|||
|
||||
Once you have your device's encryption key (`movable.sed`), you will use it in conjunction with other exploits to install custom firmware on your 3DS.
|
||||
|
||||
#### unSAFE_MODE (Recommended)
|
||||
#### BannerBomb3
|
||||
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the SAFE_MODE firmware present in all 3DS units.
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the System Settings application.
|
||||
|
||||
Continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
Continue to [BannerBomb3](bannerbomb3)
|
||||
{: .notice--primary}
|
||||
|
||||
___
|
||||
|
|
|
|||
|
|
@ -126,11 +126,11 @@ If this is unsuccessful, try using another SD card.
|
|||
|
||||
## Installing boot9strap (USM)
|
||||
|
||||
### DSiWare Management menu crashes without showing USM menu
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (USM)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php).
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `usm.bin` is on the root of the SD card. If it is missing, then download the latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/latest) (the RELEASE `.zip` file), and copy the `usm.bin` file to the root of your SD card.
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, you will need to follow [an alternate branch of Seedminer](homebrew-launcher-(pichaxx)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
|
|
@ -144,16 +144,24 @@ If neither of these solutions fixes this problem, then custom firmware may have
|
|||
|
||||
### DSiWare Management shows a question mark
|
||||
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php), ensuring that you use the `movable.sed` file for your console.
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen), ensuring that you use the `movable.sed` file for your console.
|
||||
|
||||
### DSiWare Management menu crashes without purple screen
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
|
||||
---
|
||||
|
||||
## Installing boot9strap (Fredtool)
|
||||
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (Fredtool)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
### Error on Fredtool Injector page
|
||||
|
||||
Ensure that your `movable.sed` and DSiWare backup come from the same console. A mismatch will result in an error.
|
||||
|
|
|
|||
|
|
@ -6,8 +6,8 @@ title: "BannerBomb3"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>To dump system DSiWare, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system in order to dump the DSi Internet Settings application to the SD root.</p>
|
||||
<p>To launch custom code, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system.</p>
|
||||
<p>For a more technical explanation, see <a href="https://github.com/zoogie/Bannerbomb3">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
|
@ -27,38 +27,43 @@ If you have a Taiwanese console (indicated by a T after the system version), fol
|
|||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 exploit onto your device's SD card.
|
||||
|
||||
1. Open [BannerBomb3 Tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php) on your computer
|
||||
1. Upload your movable.sed using the "Choose File" option
|
||||
1. Click "Build and Download"
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` inside of a zip file (`BannerBomb3.zip`)
|
||||
1. If your console is powered on, power off your console
|
||||
1. Power off your device
|
||||
1. Insert your SD card into your computer
|
||||
1. Open [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen) on your computer
|
||||
1. Upload your movable.sed using the “Choose File” option
|
||||
1. Click “Build and Download”
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a payload called `bb3.bin` inside of a zip archive (`DSIWARE_EXPLOIT.zip`)
|
||||
1. Copy `bb3.bin` from `DSIWARE_EXPLOIT.zip` to the root of your SD card
|
||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `BannerBomb3.zip` to the `Nintendo DSiWare` folder
|
||||
1. Copy the `F00D43D5.bin` file from `DSIWARE_EXPLOIT.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
#### Section II - Hardware Button Check
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next page.
|
||||
In this section, you will test the SAFE_MODE function of your device. This will determine which method you will follow in the next page.
|
||||
|
||||
1. Reinsert your SD card into your device
|
||||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare` -> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your system should flash Magenta (pink/purple) and then crash a few seconds later. This means it worked
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
1. If prompted to update, press Cancel
|
||||
+ If the device boots to the HOME Menu, just continue to the next step
|
||||
1. Power off your device
|
||||
1. Insert your SD card into your computer
|
||||
1. You should now have `42383841.bin` on the root of your SD card. Copy this file to somewhere on your computer, as you will use it on the next page
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
1. Delete `F00D43D5.bin` from your Nintendo DSiWare folder and from your computer. This file will not be needed anymore
|
||||
|
||||
___
|
||||
|
||||
Continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
### Next steps: Choose an exploit
|
||||
|
||||
If your device booted into Safe Mode and prompted to you to do a system update in Section II, Safe Mode is working on your device.
|
||||
|
||||
If your device booted into Safe Mode, continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
{: .notice--primary}
|
||||
|
||||
If your device did NOT boot into Safe Mode, continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
{: .notice--warning}
|
||||
|
|
|
|||
|
|
@ -6,14 +6,13 @@ title: "Installing boot9strap (Fredtool)"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application. This requires you to have a DSiWare backup, which you should have gotten in the previous section.</p>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application.</p>
|
||||
<p>This is a currently working implementation of the "FIRM partitions known-plaintext" exploit detailed <a href="https://www.3dbrew.org/wiki/3DS_System_Flaws">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
||||
### What You Need
|
||||
|
||||
* A DSiWare Backup, normally `42383841.bin` (You should have one on the root of your SD card from following [BannerBomb3](bannerbomb3))
|
||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||
* The latest release of [Frogminer_save](https://github.com/zoogie/Frogminer/releases/latest) (`Frogminer_save.zip`)
|
||||
* The latest release of [b9sTool](https://github.com/zoogie/b9sTool/releases/latest) (`boot.nds`)
|
||||
|
|
@ -27,17 +26,32 @@ As an additional safety measure, we will perform an additional check for custom
|
|||
1. Hold the (Select) button
|
||||
1. Power on your device while still holding the (Select) button
|
||||
1. If the check was successful, you will boot to the HOME Menu and you may proceed with this guide
|
||||
1. Power off your device
|
||||
|
||||
If you see a configuration menu, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
If you see a configuration menu or the console immediately powers off, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
{: .notice--danger}
|
||||
|
||||
#### Section II - Prep Work
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next section.
|
||||
|
||||
1. Reinsert your SD card into your device
|
||||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-fredtool)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Dump DSiWare"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - Prep Work
|
||||
|
||||
In this section, you will copy the files necessary to temporarily replace DS Connection Settings with Flipnote Studio, which is used to launch the boot9strap (custom firmware) installer.
|
||||
|
||||
1. Insert your SD card into your computer
|
||||
1. Open the [DSIHaxInjector_new](https://jenkins.nelthorya.net/job/DSIHaxInjector_new/build?delay=0sec) website on your computer
|
||||
1. Under the "Username" field, enter any alphanumeric name (no spaces or special characters)
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file using the first "Browse..." option
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file from the root of your SD card using the first "Browse..." option
|
||||
1. Under the "MovableSed" field, upload your `movable.sed` file using the second "Browse..." option
|
||||
1. Under the "InjectionTarget" field, set the injection target to `DSinternet` (NOT memorypit)
|
||||
1. Click "Build"
|
||||
|
|
@ -46,7 +60,6 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
1. Click on the first search result
|
||||
+ This result should have the latest timestamp
|
||||
1. Click the "output_(name).zip" link
|
||||
1. Insert your SD card into your computer
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
|
|
@ -60,7 +73,7 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
![]({{ "/images/screenshots/fredtool-root-layout.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section III - Overwriting DS Connection Settings
|
||||
#### Section IV - Overwriting DS Connection Settings
|
||||
|
||||
In this section, you will copy the hacked DS Connection Settings DSiWare to internal memory, which will temporarily replace it with Flipnote Studio.
|
||||
|
||||
|
|
@ -73,7 +86,7 @@ In this section, you will copy the hacked DS Connection Settings DSiWare to inte
|
|||
1. Navigate to `Internet Settings` -> `Nintendo DS Connections`, then select "OK" ([image](/images/screenshots/fredtool/dsconnection.png))
|
||||
1. If the exploit was successful, your device will have loaded the JPN version of Flipnote Studio
|
||||
|
||||
#### Section IV - Flipnote Exploit
|
||||
#### Section V - Flipnote Exploit
|
||||
|
||||
If you would prefer a visual guide to this section, one is available [here](https://zoogie.github.io/web/flipnote_directions/).
|
||||
{: .notice--info}
|
||||
|
|
@ -99,7 +112,7 @@ In this section, you will perform a series of very specific steps within Flipnot
|
|||
+ If your device shuts down when you try to power it on, ensure that you have copied `boot.firm` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ If you see the Luma Configuration screen, press (Start) to reboot, then continue with the guide
|
||||
|
||||
#### Section V - Luma3DS Verification
|
||||
#### Section VI - Luma3DS Verification
|
||||
|
||||
Due to the nature of the exploit used, it is occasionally (but rarely) possible for boot9strap to not actually get installed. This section will therefore verify that boot9strap was successfully installed by seeing if some files that are normally automatically generated by Luma3DS were created.
|
||||
|
||||
|
|
@ -113,9 +126,9 @@ At this point, your console will boot to Luma3DS by default.
|
|||
+ Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
|
||||
+ On the next page, you will install useful homebrew applications to complete your setup.
|
||||
|
||||
#### Section VI - Restoring DS Connection Settings
|
||||
#### Section VII - Restoring DS Connection Settings
|
||||
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section III.
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section IV.
|
||||
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
1. Copy the `42383841.bin` file from the `clean` folder of the downloaded DSiWare archive (output_(name).zip) to the `Nintendo DSiWare` folder, replacing the existing one
|
||||
|
|
|
|||
|
|
@ -18,45 +18,28 @@ title: "Installing boot9strap (USM)"
|
|||
|
||||
These instructions work on USA, Europe, Japan, and Korea region consoles as indicated by the letters U, E, J, or K after the system version.
|
||||
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
{: .notice--warning}
|
||||
|
||||
### What You Need
|
||||
|
||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||
* The latest release of [SafeB9SInstaller](https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip) (direct download)
|
||||
* The latest release of [boot9strap](https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip) (direct download)
|
||||
* The latest release of [Luma3DS](https://github.com/LumaTeam/Luma3DS/releases/latest) (the Luma3DS `.zip` file)
|
||||
* The latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/download/v1.3/usm.bin) (direct download)
|
||||
|
||||
|
||||
#### Section I - Prep Work
|
||||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 and unSAFE_MODE exploits onto your device's SD card.
|
||||
In this section, you will copy the files needed to trigger the unSAFE_MODE exploit onto your device's SD card.
|
||||
|
||||
1. If your device is powered on, power off your device
|
||||
1. Open [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php) on your computer
|
||||
1. Upload your movable.sed using the "Choose File" option
|
||||
1. Click "Build and Download"
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a SAFE_MODE exploit data file called `usm.bin` inside of a zip archive (`unSAFE_MODE.zip`)
|
||||
1. Insert your SD card into your computer
|
||||
1. Your SD card should be inserted in your computer
|
||||
1. Copy `boot.firm` and `boot.3dsx` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||
1. Create a folder named `boot9strap` on the root of your SD card
|
||||
1. Copy `boot9strap.firm` and `boot9strap.firm.sha` from the boot9strap `.zip` to the `/boot9strap/` folder on your SD card
|
||||
1. Copy `SafeB9SInstaller.bin` from the SafeB9SInstaller `.zip` to the root of your SD card
|
||||
1. Copy `usm.bin` from `unSAFE_MODE.zip` to the root of your SD card
|
||||
![]({{ "/images/screenshots/bb3/usm-root-layout.png" | absolute_url }}){: .notice--info}
|
||||
![]({{ "/images/screenshots/boot9strap-folder.png" | absolute_url }}){: .notice--info}
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `unSAFE_MODE.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
1. Copy `usm.bin` to the root of your SD card
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
|
|
@ -66,9 +49,9 @@ In this section, you will trigger the BannerBomb3 exploit using the DSiWare Mana
|
|||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-usm-menu)
|
||||
1. Press (A) to select "Inject haxx"
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-usm)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Install unSAFE_MODE"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - unSAFE_MODE
|
||||
|
|
@ -77,7 +60,7 @@ In this section, you will enter Safe Mode (a feature available on all 3DS family
|
|||
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of BannerBomb3](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
1. Press "OK" to accept the update
|
||||
+ There is no update. This is part of the exploit
|
||||
1. Press "I accept" to accept the terms and conditions
|
||||
|
|
@ -107,8 +90,7 @@ In this section, you will trigger the BannerBomb3 exploit a second time so that
|
|||
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Restore slots"
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Uninstall unSAFE_MODE"
|
||||
+ Your device will automatically reboot
|
||||
1. Power off your device
|
||||
1. Insert your SD card into your computer
|
||||
|
|
|
|||
|
|
@ -56,6 +56,7 @@ In this section, you will use the Bruteforce Movable website to retrieve your de
|
|||
+ If you are still waiting after half an hour, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask (in English) for someone there to assist you
|
||||
1. When the process is completed, download your `movable.sed` file from the site
|
||||
+ Keep this file as you will need it in the upcoming pages
|
||||
1. Power off your device
|
||||
|
||||
___
|
||||
|
||||
|
|
@ -63,11 +64,11 @@ ___
|
|||
|
||||
Once you have your device's encryption key (`movable.sed`), you will use it in conjunction with other exploits to install custom firmware on your 3DS.
|
||||
|
||||
#### unSAFE_MODE (Recommended)
|
||||
#### BannerBomb3
|
||||
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the SAFE_MODE firmware present in all 3DS units.
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the System Settings application.
|
||||
|
||||
Continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
Continue to [BannerBomb3](bannerbomb3)
|
||||
{: .notice--primary}
|
||||
|
||||
___
|
||||
|
|
|
|||
|
|
@ -126,11 +126,11 @@ If this is unsuccessful, try using another SD card.
|
|||
|
||||
## Installing boot9strap (USM)
|
||||
|
||||
### DSiWare Management menu crashes without showing USM menu
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (USM)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php).
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `usm.bin` is on the root of the SD card. If it is missing, then download the latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/latest) (the RELEASE `.zip` file), and copy the `usm.bin` file to the root of your SD card.
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, you will need to follow [an alternate branch of Seedminer](homebrew-launcher-(pichaxx)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
|
|
@ -144,16 +144,24 @@ If neither of these solutions fixes this problem, then custom firmware may have
|
|||
|
||||
### DSiWare Management shows a question mark
|
||||
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php), ensuring that you use the `movable.sed` file for your console.
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen), ensuring that you use the `movable.sed` file for your console.
|
||||
|
||||
### DSiWare Management menu crashes without purple screen
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
|
||||
---
|
||||
|
||||
## Installing boot9strap (Fredtool)
|
||||
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (Fredtool)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
### Error on Fredtool Injector page
|
||||
|
||||
Ensure that your `movable.sed` and DSiWare backup come from the same console. A mismatch will result in an error.
|
||||
|
|
|
|||
|
|
@ -6,8 +6,8 @@ title: "BannerBomb3"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>To dump system DSiWare, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system in order to dump the DSi Internet Settings application to the SD root.</p>
|
||||
<p>To launch custom code, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system.</p>
|
||||
<p>For a more technical explanation, see <a href="https://github.com/zoogie/Bannerbomb3">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
|
@ -27,38 +27,43 @@ If you have a Taiwanese console (indicated by a T after the system version), fol
|
|||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 exploit onto your device's SD card.
|
||||
|
||||
1. Open [BannerBomb3 Tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php) on your computer
|
||||
1. Upload your movable.sed using the "Choose File" option
|
||||
1. Click "Build and Download"
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` inside of a zip file (`BannerBomb3.zip`)
|
||||
1. If your console is powered on, power off your console
|
||||
1. Power off your device
|
||||
1. Insert your SD card into your computer
|
||||
1. Open [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen) on your computer
|
||||
1. Upload your movable.sed using the “Choose File” option
|
||||
1. Click “Build and Download”
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a payload called `bb3.bin` inside of a zip archive (`DSIWARE_EXPLOIT.zip`)
|
||||
1. Copy `bb3.bin` from `DSIWARE_EXPLOIT.zip` to the root of your SD card
|
||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `BannerBomb3.zip` to the `Nintendo DSiWare` folder
|
||||
1. Copy the `F00D43D5.bin` file from `DSIWARE_EXPLOIT.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
#### Section II - Hardware Button Check
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next page.
|
||||
In this section, you will test the SAFE_MODE function of your device. This will determine which method you will follow in the next page.
|
||||
|
||||
1. Reinsert your SD card into your device
|
||||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare` -> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your system should flash Magenta (pink/purple) and then crash a few seconds later. This means it worked
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
1. If prompted to update, press Cancel
|
||||
+ If the device boots to the HOME Menu, just continue to the next step
|
||||
1. Power off your device
|
||||
1. Insert your SD card into your computer
|
||||
1. You should now have `42383841.bin` on the root of your SD card. Copy this file to somewhere on your computer, as you will use it on the next page
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
1. Delete `F00D43D5.bin` from your Nintendo DSiWare folder and from your computer. This file will not be needed anymore
|
||||
|
||||
___
|
||||
|
||||
Continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
### Next steps: Choose an exploit
|
||||
|
||||
If your device booted into Safe Mode and prompted to you to do a system update in Section II, Safe Mode is working on your device.
|
||||
|
||||
If your device booted into Safe Mode, continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
{: .notice--primary}
|
||||
|
||||
If your device did NOT boot into Safe Mode, continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
{: .notice--warning}
|
||||
|
|
|
|||
|
|
@ -6,14 +6,13 @@ title: "Installing boot9strap (Fredtool)"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application. This requires you to have a DSiWare backup, which you should have gotten in the previous section.</p>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application.</p>
|
||||
<p>This is a currently working implementation of the "FIRM partitions known-plaintext" exploit detailed <a href="https://www.3dbrew.org/wiki/3DS_System_Flaws">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
||||
### What You Need
|
||||
|
||||
* A DSiWare Backup, normally `42383841.bin` (You should have one on the root of your SD card from following [BannerBomb3](bannerbomb3))
|
||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||
* The latest release of [Frogminer_save](https://github.com/zoogie/Frogminer/releases/latest) (`Frogminer_save.zip`)
|
||||
* The latest release of [b9sTool](https://github.com/zoogie/b9sTool/releases/latest) (`boot.nds`)
|
||||
|
|
@ -27,17 +26,32 @@ As an additional safety measure, we will perform an additional check for custom
|
|||
1. Hold the (Select) button
|
||||
1. Power on your device while still holding the (Select) button
|
||||
1. If the check was successful, you will boot to the HOME Menu and you may proceed with this guide
|
||||
1. Power off your device
|
||||
|
||||
If you see a configuration menu, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
If you see a configuration menu or the console immediately powers off, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
{: .notice--danger}
|
||||
|
||||
#### Section II - Prep Work
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next section.
|
||||
|
||||
1. Reinsert your SD card into your device
|
||||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-fredtool)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Dump DSiWare"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - Prep Work
|
||||
|
||||
In this section, you will copy the files necessary to temporarily replace DS Connection Settings with Flipnote Studio, which is used to launch the boot9strap (custom firmware) installer.
|
||||
|
||||
1. Insert your SD card into your computer
|
||||
1. Open the [DSIHaxInjector_new](https://jenkins.nelthorya.net/job/DSIHaxInjector_new/build?delay=0sec) website on your computer
|
||||
1. Under the "Username" field, enter any alphanumeric name (no spaces or special characters)
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file using the first "Browse..." option
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file from the root of your SD card using the first "Browse..." option
|
||||
1. Under the "MovableSed" field, upload your `movable.sed` file using the second "Browse..." option
|
||||
1. Under the "InjectionTarget" field, set the injection target to `DSinternet` (NOT memorypit)
|
||||
1. Click "Build"
|
||||
|
|
@ -46,7 +60,6 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
1. Click on the first search result
|
||||
+ This result should have the latest timestamp
|
||||
1. Click the "output_(name).zip" link
|
||||
1. Insert your SD card into your computer
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
|
|
@ -60,7 +73,7 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
![]({{ "/images/screenshots/fredtool-root-layout.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section III - Overwriting DS Connection Settings
|
||||
#### Section IV - Overwriting DS Connection Settings
|
||||
|
||||
In this section, you will copy the hacked DS Connection Settings DSiWare to internal memory, which will temporarily replace it with Flipnote Studio.
|
||||
|
||||
|
|
@ -73,7 +86,7 @@ In this section, you will copy the hacked DS Connection Settings DSiWare to inte
|
|||
1. Navigate to `Internet Settings` -> `Nintendo DS Connections`, then select "OK" ([image](/images/screenshots/fredtool/dsconnection.png))
|
||||
1. If the exploit was successful, your device will have loaded the JPN version of Flipnote Studio
|
||||
|
||||
#### Section IV - Flipnote Exploit
|
||||
#### Section V - Flipnote Exploit
|
||||
|
||||
If you would prefer a visual guide to this section, one is available [here](https://zoogie.github.io/web/flipnote_directions/).
|
||||
{: .notice--info}
|
||||
|
|
@ -99,7 +112,7 @@ In this section, you will perform a series of very specific steps within Flipnot
|
|||
+ If your device shuts down when you try to power it on, ensure that you have copied `boot.firm` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ If you see the Luma Configuration screen, press (Start) to reboot, then continue with the guide
|
||||
|
||||
#### Section V - Luma3DS Verification
|
||||
#### Section VI - Luma3DS Verification
|
||||
|
||||
Due to the nature of the exploit used, it is occasionally (but rarely) possible for boot9strap to not actually get installed. This section will therefore verify that boot9strap was successfully installed by seeing if some files that are normally automatically generated by Luma3DS were created.
|
||||
|
||||
|
|
@ -113,9 +126,9 @@ At this point, your console will boot to Luma3DS by default.
|
|||
+ Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
|
||||
+ On the next page, you will install useful homebrew applications to complete your setup.
|
||||
|
||||
#### Section VI - Restoring DS Connection Settings
|
||||
#### Section VII - Restoring DS Connection Settings
|
||||
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section III.
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section IV.
|
||||
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
1. Copy the `42383841.bin` file from the `clean` folder of the downloaded DSiWare archive (output_(name).zip) to the `Nintendo DSiWare` folder, replacing the existing one
|
||||
|
|
|
|||
|
|
@ -18,45 +18,28 @@ title: "Installing boot9strap (USM)"
|
|||
|
||||
These instructions work on USA, Europe, Japan, and Korea region consoles as indicated by the letters U, E, J, or K after the system version.
|
||||
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
{: .notice--warning}
|
||||
|
||||
### What You Need
|
||||
|
||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||
* The latest release of [SafeB9SInstaller](https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip) (direct download)
|
||||
* The latest release of [boot9strap](https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip) (direct download)
|
||||
* The latest release of [Luma3DS](https://github.com/LumaTeam/Luma3DS/releases/latest) (the Luma3DS `.zip` file)
|
||||
* The latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/download/v1.3/usm.bin) (direct download)
|
||||
|
||||
|
||||
#### Section I - Prep Work
|
||||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 and unSAFE_MODE exploits onto your device's SD card.
|
||||
In this section, you will copy the files needed to trigger the unSAFE_MODE exploit onto your device's SD card.
|
||||
|
||||
1. If your device is powered on, power off your device
|
||||
1. Open [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php) on your computer
|
||||
1. Upload your movable.sed using the "Choose File" option
|
||||
1. Click "Build and Download"
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a SAFE_MODE exploit data file called `usm.bin` inside of a zip archive (`unSAFE_MODE.zip`)
|
||||
1. Insert your SD card into your computer
|
||||
1. Your SD card should be inserted in your computer
|
||||
1. Copy `boot.firm` and `boot.3dsx` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||
1. Create a folder named `boot9strap` on the root of your SD card
|
||||
1. Copy `boot9strap.firm` and `boot9strap.firm.sha` from the boot9strap `.zip` to the `/boot9strap/` folder on your SD card
|
||||
1. Copy `SafeB9SInstaller.bin` from the SafeB9SInstaller `.zip` to the root of your SD card
|
||||
1. Copy `usm.bin` from `unSAFE_MODE.zip` to the root of your SD card
|
||||
![]({{ "/images/screenshots/bb3/usm-root-layout.png" | absolute_url }}){: .notice--info}
|
||||
![]({{ "/images/screenshots/boot9strap-folder.png" | absolute_url }}){: .notice--info}
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `unSAFE_MODE.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
1. Copy `usm.bin` to the root of your SD card
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
|
|
@ -66,9 +49,9 @@ In this section, you will trigger the BannerBomb3 exploit using the DSiWare Mana
|
|||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-usm-menu)
|
||||
1. Press (A) to select "Inject haxx"
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-usm)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Install unSAFE_MODE"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - unSAFE_MODE
|
||||
|
|
@ -77,7 +60,7 @@ In this section, you will enter Safe Mode (a feature available on all 3DS family
|
|||
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of BannerBomb3](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
1. Press "OK" to accept the update
|
||||
+ There is no update. This is part of the exploit
|
||||
1. Press "I accept" to accept the terms and conditions
|
||||
|
|
@ -107,8 +90,7 @@ In this section, you will trigger the BannerBomb3 exploit a second time so that
|
|||
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Restore slots"
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Uninstall unSAFE_MODE"
|
||||
+ Your device will automatically reboot
|
||||
1. Power off your device
|
||||
1. Insert your SD card into your computer
|
||||
|
|
|
|||
|
|
@ -56,6 +56,7 @@ In this section, you will use the Bruteforce Movable website to retrieve your de
|
|||
+ If you are still waiting after half an hour, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask (in English) for someone there to assist you
|
||||
1. When the process is completed, download your `movable.sed` file from the site
|
||||
+ Keep this file as you will need it in the upcoming pages
|
||||
1. Power off your device
|
||||
|
||||
___
|
||||
|
||||
|
|
@ -63,11 +64,11 @@ ___
|
|||
|
||||
Once you have your device's encryption key (`movable.sed`), you will use it in conjunction with other exploits to install custom firmware on your 3DS.
|
||||
|
||||
#### unSAFE_MODE (Recommended)
|
||||
#### BannerBomb3
|
||||
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the SAFE_MODE firmware present in all 3DS units.
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the System Settings application.
|
||||
|
||||
Continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
Continue to [BannerBomb3](bannerbomb3)
|
||||
{: .notice--primary}
|
||||
|
||||
___
|
||||
|
|
|
|||
|
|
@ -126,11 +126,11 @@ If this is unsuccessful, try using another SD card.
|
|||
|
||||
## Installing boot9strap (USM)
|
||||
|
||||
### DSiWare Management menu crashes without showing USM menu
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (USM)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php).
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `usm.bin` is on the root of the SD card. If it is missing, then download the latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/latest) (the RELEASE `.zip` file), and copy the `usm.bin` file to the root of your SD card.
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, you will need to follow [an alternate branch of Seedminer](homebrew-launcher-(pichaxx)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
|
|
@ -144,16 +144,24 @@ If neither of these solutions fixes this problem, then custom firmware may have
|
|||
|
||||
### DSiWare Management shows a question mark
|
||||
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php), ensuring that you use the `movable.sed` file for your console.
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen), ensuring that you use the `movable.sed` file for your console.
|
||||
|
||||
### DSiWare Management menu crashes without purple screen
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
|
||||
---
|
||||
|
||||
## Installing boot9strap (Fredtool)
|
||||
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (Fredtool)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
### Error on Fredtool Injector page
|
||||
|
||||
Ensure that your `movable.sed` and DSiWare backup come from the same console. A mismatch will result in an error.
|
||||
|
|
|
|||
|
|
@ -6,8 +6,8 @@ title: "BannerBomb3"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>To dump system DSiWare, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system in order to dump the DSi Internet Settings application to the SD root.</p>
|
||||
<p>To launch custom code, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system.</p>
|
||||
<p>For a more technical explanation, see <a href="https://github.com/zoogie/Bannerbomb3">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
|
@ -27,38 +27,43 @@ If you have a Taiwanese console (indicated by a T after the system version), fol
|
|||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 exploit onto your device's SD card.
|
||||
|
||||
1. Open [BannerBomb3 Tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php) on your computer
|
||||
1. Upload your movable.sed using the "Choose File" option
|
||||
1. Click "Build and Download"
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` inside of a zip file (`BannerBomb3.zip`)
|
||||
1. If your console is powered on, power off your console
|
||||
1. Power off your device
|
||||
1. Insert your SD card into your computer
|
||||
1. Open [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen) on your computer
|
||||
1. Upload your movable.sed using the “Choose File” option
|
||||
1. Click “Build and Download”
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a payload called `bb3.bin` inside of a zip archive (`DSIWARE_EXPLOIT.zip`)
|
||||
1. Copy `bb3.bin` from `DSIWARE_EXPLOIT.zip` to the root of your SD card
|
||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `BannerBomb3.zip` to the `Nintendo DSiWare` folder
|
||||
1. Copy the `F00D43D5.bin` file from `DSIWARE_EXPLOIT.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
#### Section II - Hardware Button Check
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next page.
|
||||
In this section, you will test the SAFE_MODE function of your device. This will determine which method you will follow in the next page.
|
||||
|
||||
1. Reinsert your SD card into your device
|
||||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare` -> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your system should flash Magenta (pink/purple) and then crash a few seconds later. This means it worked
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
1. If prompted to update, press Cancel
|
||||
+ If the device boots to the HOME Menu, just continue to the next step
|
||||
1. Power off your device
|
||||
1. Insert your SD card into your computer
|
||||
1. You should now have `42383841.bin` on the root of your SD card. Copy this file to somewhere on your computer, as you will use it on the next page
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
1. Delete `F00D43D5.bin` from your Nintendo DSiWare folder and from your computer. This file will not be needed anymore
|
||||
|
||||
___
|
||||
|
||||
Continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
### Next steps: Choose an exploit
|
||||
|
||||
If your device booted into Safe Mode and prompted to you to do a system update in Section II, Safe Mode is working on your device.
|
||||
|
||||
If your device booted into Safe Mode, continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
{: .notice--primary}
|
||||
|
||||
If your device did NOT boot into Safe Mode, continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
{: .notice--warning}
|
||||
|
|
|
|||
|
|
@ -6,14 +6,13 @@ title: "Installing boot9strap (Fredtool)"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application. This requires you to have a DSiWare backup, which you should have gotten in the previous section.</p>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application.</p>
|
||||
<p>This is a currently working implementation of the "FIRM partitions known-plaintext" exploit detailed <a href="https://www.3dbrew.org/wiki/3DS_System_Flaws">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
||||
### What You Need
|
||||
|
||||
* A DSiWare Backup, normally `42383841.bin` (You should have one on the root of your SD card from following [BannerBomb3](bannerbomb3))
|
||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||
* The latest release of [Frogminer_save](https://github.com/zoogie/Frogminer/releases/latest) (`Frogminer_save.zip`)
|
||||
* The latest release of [b9sTool](https://github.com/zoogie/b9sTool/releases/latest) (`boot.nds`)
|
||||
|
|
@ -27,17 +26,32 @@ As an additional safety measure, we will perform an additional check for custom
|
|||
1. Hold the (Select) button
|
||||
1. Power on your device while still holding the (Select) button
|
||||
1. If the check was successful, you will boot to the HOME Menu and you may proceed with this guide
|
||||
1. Power off your device
|
||||
|
||||
If you see a configuration menu, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
If you see a configuration menu or the console immediately powers off, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
{: .notice--danger}
|
||||
|
||||
#### Section II - Prep Work
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next section.
|
||||
|
||||
1. Reinsert your SD card into your device
|
||||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-fredtool)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Dump DSiWare"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - Prep Work
|
||||
|
||||
In this section, you will copy the files necessary to temporarily replace DS Connection Settings with Flipnote Studio, which is used to launch the boot9strap (custom firmware) installer.
|
||||
|
||||
1. Insert your SD card into your computer
|
||||
1. Open the [DSIHaxInjector_new](https://jenkins.nelthorya.net/job/DSIHaxInjector_new/build?delay=0sec) website on your computer
|
||||
1. Under the "Username" field, enter any alphanumeric name (no spaces or special characters)
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file using the first "Browse..." option
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file from the root of your SD card using the first "Browse..." option
|
||||
1. Under the "MovableSed" field, upload your `movable.sed` file using the second "Browse..." option
|
||||
1. Under the "InjectionTarget" field, set the injection target to `DSinternet` (NOT memorypit)
|
||||
1. Click "Build"
|
||||
|
|
@ -46,7 +60,6 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
1. Click on the first search result
|
||||
+ This result should have the latest timestamp
|
||||
1. Click the "output_(name).zip" link
|
||||
1. Insert your SD card into your computer
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
|
|
@ -60,7 +73,7 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
![]({{ "/images/screenshots/fredtool-root-layout.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section III - Overwriting DS Connection Settings
|
||||
#### Section IV - Overwriting DS Connection Settings
|
||||
|
||||
In this section, you will copy the hacked DS Connection Settings DSiWare to internal memory, which will temporarily replace it with Flipnote Studio.
|
||||
|
||||
|
|
@ -73,7 +86,7 @@ In this section, you will copy the hacked DS Connection Settings DSiWare to inte
|
|||
1. Navigate to `Internet Settings` -> `Nintendo DS Connections`, then select "OK" ([image](/images/screenshots/fredtool/dsconnection.png))
|
||||
1. If the exploit was successful, your device will have loaded the JPN version of Flipnote Studio
|
||||
|
||||
#### Section IV - Flipnote Exploit
|
||||
#### Section V - Flipnote Exploit
|
||||
|
||||
If you would prefer a visual guide to this section, one is available [here](https://zoogie.github.io/web/flipnote_directions/).
|
||||
{: .notice--info}
|
||||
|
|
@ -99,7 +112,7 @@ In this section, you will perform a series of very specific steps within Flipnot
|
|||
+ If your device shuts down when you try to power it on, ensure that you have copied `boot.firm` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ If you see the Luma Configuration screen, press (Start) to reboot, then continue with the guide
|
||||
|
||||
#### Section V - Luma3DS Verification
|
||||
#### Section VI - Luma3DS Verification
|
||||
|
||||
Due to the nature of the exploit used, it is occasionally (but rarely) possible for boot9strap to not actually get installed. This section will therefore verify that boot9strap was successfully installed by seeing if some files that are normally automatically generated by Luma3DS were created.
|
||||
|
||||
|
|
@ -113,9 +126,9 @@ At this point, your console will boot to Luma3DS by default.
|
|||
+ Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
|
||||
+ On the next page, you will install useful homebrew applications to complete your setup.
|
||||
|
||||
#### Section VI - Restoring DS Connection Settings
|
||||
#### Section VII - Restoring DS Connection Settings
|
||||
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section III.
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section IV.
|
||||
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
1. Copy the `42383841.bin` file from the `clean` folder of the downloaded DSiWare archive (output_(name).zip) to the `Nintendo DSiWare` folder, replacing the existing one
|
||||
|
|
|
|||
|
|
@ -18,45 +18,28 @@ title: "Installing boot9strap (USM)"
|
|||
|
||||
These instructions work on USA, Europe, Japan, and Korea region consoles as indicated by the letters U, E, J, or K after the system version.
|
||||
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
{: .notice--warning}
|
||||
|
||||
### What You Need
|
||||
|
||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||
* The latest release of [SafeB9SInstaller](https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip) (direct download)
|
||||
* The latest release of [boot9strap](https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip) (direct download)
|
||||
* The latest release of [Luma3DS](https://github.com/LumaTeam/Luma3DS/releases/latest) (the Luma3DS `.zip` file)
|
||||
* The latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/download/v1.3/usm.bin) (direct download)
|
||||
|
||||
|
||||
#### Section I - Prep Work
|
||||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 and unSAFE_MODE exploits onto your device's SD card.
|
||||
In this section, you will copy the files needed to trigger the unSAFE_MODE exploit onto your device's SD card.
|
||||
|
||||
1. If your device is powered on, power off your device
|
||||
1. Open [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php) on your computer
|
||||
1. Upload your movable.sed using the "Choose File" option
|
||||
1. Click "Build and Download"
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a SAFE_MODE exploit data file called `usm.bin` inside of a zip archive (`unSAFE_MODE.zip`)
|
||||
1. Insert your SD card into your computer
|
||||
1. Your SD card should be inserted in your computer
|
||||
1. Copy `boot.firm` and `boot.3dsx` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||
1. Create a folder named `boot9strap` on the root of your SD card
|
||||
1. Copy `boot9strap.firm` and `boot9strap.firm.sha` from the boot9strap `.zip` to the `/boot9strap/` folder on your SD card
|
||||
1. Copy `SafeB9SInstaller.bin` from the SafeB9SInstaller `.zip` to the root of your SD card
|
||||
1. Copy `usm.bin` from `unSAFE_MODE.zip` to the root of your SD card
|
||||
![]({{ "/images/screenshots/bb3/usm-root-layout.png" | absolute_url }}){: .notice--info}
|
||||
![]({{ "/images/screenshots/boot9strap-folder.png" | absolute_url }}){: .notice--info}
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `unSAFE_MODE.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
1. Copy `usm.bin` to the root of your SD card
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
|
|
@ -66,9 +49,9 @@ In this section, you will trigger the BannerBomb3 exploit using the DSiWare Mana
|
|||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-usm-menu)
|
||||
1. Press (A) to select "Inject haxx"
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-usm)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Install unSAFE_MODE"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - unSAFE_MODE
|
||||
|
|
@ -77,7 +60,7 @@ In this section, you will enter Safe Mode (a feature available on all 3DS family
|
|||
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of BannerBomb3](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
1. Press "OK" to accept the update
|
||||
+ There is no update. This is part of the exploit
|
||||
1. Press "I accept" to accept the terms and conditions
|
||||
|
|
@ -107,8 +90,7 @@ In this section, you will trigger the BannerBomb3 exploit a second time so that
|
|||
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Restore slots"
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Uninstall unSAFE_MODE"
|
||||
+ Your device will automatically reboot
|
||||
1. Power off your device
|
||||
1. Insert your SD card into your computer
|
||||
|
|
|
|||
|
|
@ -56,6 +56,7 @@ In this section, you will use the Bruteforce Movable website to retrieve your de
|
|||
+ If you are still waiting after half an hour, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask (in English) for someone there to assist you
|
||||
1. When the process is completed, download your `movable.sed` file from the site
|
||||
+ Keep this file as you will need it in the upcoming pages
|
||||
1. Power off your device
|
||||
|
||||
___
|
||||
|
||||
|
|
@ -63,11 +64,11 @@ ___
|
|||
|
||||
Once you have your device's encryption key (`movable.sed`), you will use it in conjunction with other exploits to install custom firmware on your 3DS.
|
||||
|
||||
#### unSAFE_MODE (Recommended)
|
||||
#### BannerBomb3
|
||||
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the SAFE_MODE firmware present in all 3DS units.
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the System Settings application.
|
||||
|
||||
Continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
Continue to [BannerBomb3](bannerbomb3)
|
||||
{: .notice--primary}
|
||||
|
||||
___
|
||||
|
|
|
|||
|
|
@ -126,11 +126,11 @@ If this is unsuccessful, try using another SD card.
|
|||
|
||||
## Installing boot9strap (USM)
|
||||
|
||||
### DSiWare Management menu crashes without showing USM menu
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (USM)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php).
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `usm.bin` is on the root of the SD card. If it is missing, then download the latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/latest) (the RELEASE `.zip` file), and copy the `usm.bin` file to the root of your SD card.
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, you will need to follow [an alternate branch of Seedminer](homebrew-launcher-(pichaxx)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
|
|
@ -144,16 +144,24 @@ If neither of these solutions fixes this problem, then custom firmware may have
|
|||
|
||||
### DSiWare Management shows a question mark
|
||||
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php), ensuring that you use the `movable.sed` file for your console.
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen), ensuring that you use the `movable.sed` file for your console.
|
||||
|
||||
### DSiWare Management menu crashes without purple screen
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
|
||||
---
|
||||
|
||||
## Installing boot9strap (Fredtool)
|
||||
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (Fredtool)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
### Error on Fredtool Injector page
|
||||
|
||||
Ensure that your `movable.sed` and DSiWare backup come from the same console. A mismatch will result in an error.
|
||||
|
|
|
|||
|
|
@ -6,8 +6,8 @@ title: "BannerBomb3"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>To dump system DSiWare, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system in order to dump the DSi Internet Settings application to the SD root.</p>
|
||||
<p>To launch custom code, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system.</p>
|
||||
<p>For a more technical explanation, see <a href="https://github.com/zoogie/Bannerbomb3">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
|
@ -27,38 +27,43 @@ If you have a Taiwanese console (indicated by a T after the system version), fol
|
|||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 exploit onto your device's SD card.
|
||||
|
||||
1. Open [BannerBomb3 Tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php) on your computer
|
||||
1. Upload your movable.sed using the "Choose File" option
|
||||
1. Click "Build and Download"
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` inside of a zip file (`BannerBomb3.zip`)
|
||||
1. If your console is powered on, power off your console
|
||||
1. Schalte deinen 3DS aus
|
||||
1. Stecke deine SD-Karte in deinen Computer
|
||||
1. Open [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen) on your computer
|
||||
1. Upload your movable.sed using the “Choose File” option
|
||||
1. Click “Build and Download”
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a payload called `bb3.bin` inside of a zip archive (`DSIWARE_EXPLOIT.zip`)
|
||||
1. Copy `bb3.bin` from `DSIWARE_EXPLOIT.zip` to the root of your SD card
|
||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `BannerBomb3.zip` to the `Nintendo DSiWare` folder
|
||||
1. Copy the `F00D43D5.bin` file from `DSIWARE_EXPLOIT.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
#### Section II - Hardware Button Check
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next page.
|
||||
In this section, you will test the SAFE_MODE function of your device. This will determine which method you will follow in the next page.
|
||||
|
||||
1. Stecke deine SD-Karte nun wieder in deinen 3DS
|
||||
1. Schalte deine Konsole an
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare` -> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your system should flash Magenta (pink/purple) and then crash a few seconds later. This means it worked
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
1. If prompted to update, press Cancel
|
||||
+ If the device boots to the HOME Menu, just continue to the next step
|
||||
1. Schalte deinen 3DS aus
|
||||
1. Stecke deine SD-Karte in deinen Computer
|
||||
1. You should now have `42383841.bin` on the root of your SD card. Copy this file to somewhere on your computer, as you will use it on the next page
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
1. Delete `F00D43D5.bin` from your Nintendo DSiWare folder and from your computer. This file will not be needed anymore
|
||||
|
||||
___
|
||||
|
||||
Continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
### Next steps: Choose an exploit
|
||||
|
||||
If your device booted into Safe Mode and prompted to you to do a system update in Section II, Safe Mode is working on your device.
|
||||
|
||||
If your device booted into Safe Mode, continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
{: .notice--primary}
|
||||
|
||||
If your device did NOT boot into Safe Mode, continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
{: .notice--warning}
|
||||
|
|
|
|||
|
|
@ -6,14 +6,13 @@ title: "Installing boot9strap (Fredtool)"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application. This requires you to have a DSiWare backup, which you should have gotten in the previous section.</p>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application.</p>
|
||||
<p>This is a currently working implementation of the "FIRM partitions known-plaintext" exploit detailed <a href="https://www.3dbrew.org/wiki/3DS_System_Flaws">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
||||
### Was du brauchst
|
||||
|
||||
* A DSiWare Backup, normally `42383841.bin` (You should have one on the root of your SD card from following [BannerBomb3](bannerbomb3))
|
||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||
* The latest release of [Frogminer_save](https://github.com/zoogie/Frogminer/releases/latest) (`Frogminer_save.zip`)
|
||||
* The latest release of [b9sTool](https://github.com/zoogie/b9sTool/releases/latest) (`boot.nds`)
|
||||
|
|
@ -27,17 +26,32 @@ As an additional safety measure, we will perform an additional check for custom
|
|||
1. Hold the (Select) button
|
||||
1. Power on your device while still holding the (Select) button
|
||||
1. If the check was successful, you will boot to the HOME Menu and you may proceed with this guide
|
||||
1. Schalte deinen 3DS aus
|
||||
|
||||
If you see a configuration menu, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
If you see a configuration menu or the console immediately powers off, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
{: .notice--danger}
|
||||
|
||||
#### Section II - Prep Work
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next section.
|
||||
|
||||
1. Stecke deine SD-Karte nun wieder in deinen 3DS
|
||||
1. Schalte deine Konsole an
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-fredtool)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Dump DSiWare"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - Prep Work
|
||||
|
||||
In this section, you will copy the files necessary to temporarily replace DS Connection Settings with Flipnote Studio, which is used to launch the boot9strap (custom firmware) installer.
|
||||
|
||||
1. Stecke deine SD-Karte in deinen Computer
|
||||
1. Open the [DSIHaxInjector_new](https://jenkins.nelthorya.net/job/DSIHaxInjector_new/build?delay=0sec) website on your computer
|
||||
1. Under the "Username" field, enter any alphanumeric name (no spaces or special characters)
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file using the first "Browse..." option
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file from the root of your SD card using the first "Browse..." option
|
||||
1. Under the "MovableSed" field, upload your `movable.sed` file using the second "Browse..." option
|
||||
1. Under the "InjectionTarget" field, set the injection target to `DSinternet` (NOT memorypit)
|
||||
1. Click "Build"
|
||||
|
|
@ -46,7 +60,6 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
1. Click on the first search result
|
||||
+ This result should have the latest timestamp
|
||||
1. Click the "output_(name).zip" link
|
||||
1. Stecke deine SD-Karte in deinen Computer
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
|
|
@ -60,7 +73,7 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
![]({{ "/images/screenshots/fredtool-root-layout.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section III - Overwriting DS Connection Settings
|
||||
#### Section IV - Overwriting DS Connection Settings
|
||||
|
||||
In this section, you will copy the hacked DS Connection Settings DSiWare to internal memory, which will temporarily replace it with Flipnote Studio.
|
||||
|
||||
|
|
@ -73,7 +86,7 @@ In this section, you will copy the hacked DS Connection Settings DSiWare to inte
|
|||
1. Navigate to `Internet Settings` -> `Nintendo DS Connections`, then select "OK" ([image](/images/screenshots/fredtool/dsconnection.png))
|
||||
1. If the exploit was successful, your device will have loaded the JPN version of Flipnote Studio
|
||||
|
||||
#### Section IV - Flipnote Exploit
|
||||
#### Section V - Flipnote Exploit
|
||||
|
||||
If you would prefer a visual guide to this section, one is available [here](https://zoogie.github.io/web/flipnote_directions/).
|
||||
{: .notice--info}
|
||||
|
|
@ -99,7 +112,7 @@ In this section, you will perform a series of very specific steps within Flipnot
|
|||
+ If your device shuts down when you try to power it on, ensure that you have copied `boot.firm` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ If you see the Luma Configuration screen, press (Start) to reboot, then continue with the guide
|
||||
|
||||
#### Section V - Luma3DS Verification
|
||||
#### Section VI - Luma3DS Verification
|
||||
|
||||
Due to the nature of the exploit used, it is occasionally (but rarely) possible for boot9strap to not actually get installed. This section will therefore verify that boot9strap was successfully installed by seeing if some files that are normally automatically generated by Luma3DS were created.
|
||||
|
||||
|
|
@ -113,9 +126,9 @@ At this point, your console will boot to Luma3DS by default.
|
|||
+ Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
|
||||
+ On the next page, you will install useful homebrew applications to complete your setup.
|
||||
|
||||
#### Section VI - Restoring DS Connection Settings
|
||||
#### Section VII - Restoring DS Connection Settings
|
||||
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section III.
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section IV.
|
||||
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
1. Copy the `42383841.bin` file from the `clean` folder of the downloaded DSiWare archive (output_(name).zip) to the `Nintendo DSiWare` folder, replacing the existing one
|
||||
|
|
|
|||
|
|
@ -18,45 +18,28 @@ title: "Installing boot9strap (USM)"
|
|||
|
||||
These instructions work on USA, Europe, Japan, and Korea region consoles as indicated by the letters U, E, J, or K after the system version.
|
||||
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
{: .notice--warning}
|
||||
|
||||
### Was du brauchst
|
||||
|
||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||
* The latest release of [SafeB9SInstaller](https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip) (direct download)
|
||||
* The latest release of [boot9strap](https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip) (direct download)
|
||||
* The latest release of [Luma3DS](https://github.com/LumaTeam/Luma3DS/releases/latest) (the Luma3DS `.zip` file)
|
||||
* The latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/download/v1.3/usm.bin) (direct download)
|
||||
|
||||
|
||||
#### Schritt I - Vorbereitungen
|
||||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 and unSAFE_MODE exploits onto your device's SD card.
|
||||
In this section, you will copy the files needed to trigger the unSAFE_MODE exploit onto your device's SD card.
|
||||
|
||||
1. If your device is powered on, power off your device
|
||||
1. Open [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php) on your computer
|
||||
1. Upload your movable.sed using the "Choose File" option
|
||||
1. Click "Build and Download"
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a SAFE_MODE exploit data file called `usm.bin` inside of a zip archive (`unSAFE_MODE.zip`)
|
||||
1. Stecke deine SD-Karte in deinen Computer
|
||||
1. Your SD card should be inserted in your computer
|
||||
1. Copy `boot.firm` and `boot.3dsx` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||
1. Erstelle einen Ordner namens `boot9strap` im Stammverzeichnis deiner SD-Karte
|
||||
1. Kopiere `boot9strap.firm` und `boot9strap.firm.sha` aus der boot9strap `.zip` in den `/boot9strap/`-Ordner auf deiner SD-Karte
|
||||
1. Copy `SafeB9SInstaller.bin` from the SafeB9SInstaller `.zip` to the root of your SD card
|
||||
1. Copy `usm.bin` from `unSAFE_MODE.zip` to the root of your SD card
|
||||
![]({{ "/images/screenshots/bb3/usm-root-layout.png" | absolute_url }}){: .notice--info}
|
||||
![]({{ "/images/screenshots/boot9strap-folder.png" | absolute_url }}){: .notice--info}
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `unSAFE_MODE.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
1. Copy `usm.bin` to the root of your SD card
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
|
|
@ -66,9 +49,9 @@ In this section, you will trigger the BannerBomb3 exploit using the DSiWare Mana
|
|||
1. Schalte deine Konsole an
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-usm-menu)
|
||||
1. Press (A) to select "Inject haxx"
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-usm)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Install unSAFE_MODE"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - unSAFE_MODE
|
||||
|
|
@ -77,7 +60,7 @@ In this section, you will enter Safe Mode (a feature available on all 3DS family
|
|||
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of BannerBomb3](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
1. Press "OK" to accept the update
|
||||
+ There is no update. This is part of the exploit
|
||||
1. Press "I accept" to accept the terms and conditions
|
||||
|
|
@ -107,8 +90,7 @@ In this section, you will trigger the BannerBomb3 exploit a second time so that
|
|||
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Restore slots"
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Uninstall unSAFE_MODE"
|
||||
+ Your device will automatically reboot
|
||||
1. Schalte deinen 3DS aus
|
||||
1. Stecke deine SD-Karte in deinen Computer
|
||||
|
|
|
|||
|
|
@ -56,6 +56,7 @@ In this section, you will use the Bruteforce Movable website to retrieve your de
|
|||
+ If you are still waiting after half an hour, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask (in English) for someone there to assist you
|
||||
1. When the process is completed, download your `movable.sed` file from the site
|
||||
+ Keep this file as you will need it in the upcoming pages
|
||||
1. Schalte deinen 3DS aus
|
||||
|
||||
___
|
||||
|
||||
|
|
@ -63,11 +64,11 @@ ___
|
|||
|
||||
Once you have your device's encryption key (`movable.sed`), you will use it in conjunction with other exploits to install custom firmware on your 3DS.
|
||||
|
||||
#### unSAFE_MODE (Recommended)
|
||||
#### BannerBomb3
|
||||
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the SAFE_MODE firmware present in all 3DS units.
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the System Settings application.
|
||||
|
||||
Continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
Continue to [BannerBomb3](bannerbomb3)
|
||||
{: .notice--primary}
|
||||
|
||||
___
|
||||
|
|
|
|||
|
|
@ -126,11 +126,11 @@ If this is unsuccessful, try using another SD card.
|
|||
|
||||
## Installing boot9strap (USM)
|
||||
|
||||
### DSiWare Management menu crashes without showing USM menu
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (USM)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php).
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `usm.bin` is on the root of the SD card. If it is missing, then download the latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/latest) (the RELEASE `.zip` file), and copy the `usm.bin` file to the root of your SD card.
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, you will need to follow [an alternate branch of Seedminer](homebrew-launcher-(pichaxx)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
|
|
@ -144,16 +144,24 @@ If neither of these solutions fixes this problem, then custom firmware may have
|
|||
|
||||
### DSiWare Management shows a question mark
|
||||
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php), ensuring that you use the `movable.sed` file for your console.
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen), ensuring that you use the `movable.sed` file for your console.
|
||||
|
||||
### DSiWare Management menu crashes without purple screen
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
|
||||
---
|
||||
|
||||
## Installing boot9strap (Fredtool)
|
||||
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (Fredtool)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
### Error on Fredtool Injector page
|
||||
|
||||
Ensure that your `movable.sed` and DSiWare backup come from the same console. A mismatch will result in an error.
|
||||
|
|
|
|||
|
|
@ -6,8 +6,8 @@ title: "BannerBomb3"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>To dump system DSiWare, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system in order to dump the DSi Internet Settings application to the SD root.</p>
|
||||
<p>To launch custom code, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system.</p>
|
||||
<p>For a more technical explanation, see <a href="https://github.com/zoogie/Bannerbomb3">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
|
@ -27,38 +27,43 @@ If you have a Taiwanese console (indicated by a T after the system version), fol
|
|||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 exploit onto your device's SD card.
|
||||
|
||||
1. Open [BannerBomb3 Tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php) on your computer
|
||||
1. Upload your movable.sed using the "Choose File" option
|
||||
1. Click "Build and Download"
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` inside of a zip file (`BannerBomb3.zip`)
|
||||
1. If your console is powered on, power off your console
|
||||
1. Power off your device
|
||||
1. Εισάγετε την κάρτα SD στον υπολογιστή σας
|
||||
1. Open [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen) on your computer
|
||||
1. Upload your movable.sed using the “Choose File” option
|
||||
1. Click “Build and Download”
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a payload called `bb3.bin` inside of a zip archive (`DSIWARE_EXPLOIT.zip`)
|
||||
1. Copy `bb3.bin` from `DSIWARE_EXPLOIT.zip` to the root of your SD card
|
||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `BannerBomb3.zip` to the `Nintendo DSiWare` folder
|
||||
1. Copy the `F00D43D5.bin` file from `DSIWARE_EXPLOIT.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
#### Section II - Hardware Button Check
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next page.
|
||||
In this section, you will test the SAFE_MODE function of your device. This will determine which method you will follow in the next page.
|
||||
|
||||
1. Reinsert your SD card into your device
|
||||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare` -> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your system should flash Magenta (pink/purple) and then crash a few seconds later. This means it worked
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
1. If prompted to update, press Cancel
|
||||
+ If the device boots to the HOME Menu, just continue to the next step
|
||||
1. Power off your device
|
||||
1. Εισάγετε την κάρτα SD στον υπολογιστή σας
|
||||
1. You should now have `42383841.bin` on the root of your SD card. Copy this file to somewhere on your computer, as you will use it on the next page
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
1. Delete `F00D43D5.bin` from your Nintendo DSiWare folder and from your computer. This file will not be needed anymore
|
||||
|
||||
___
|
||||
|
||||
Continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
### Next steps: Choose an exploit
|
||||
|
||||
If your device booted into Safe Mode and prompted to you to do a system update in Section II, Safe Mode is working on your device.
|
||||
|
||||
If your device booted into Safe Mode, continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
{: .notice--primary}
|
||||
|
||||
If your device did NOT boot into Safe Mode, continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
{: .notice--warning}
|
||||
|
|
|
|||
|
|
@ -6,14 +6,13 @@ title: "Installing boot9strap (Fredtool)"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application. This requires you to have a DSiWare backup, which you should have gotten in the previous section.</p>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application.</p>
|
||||
<p>This is a currently working implementation of the "FIRM partitions known-plaintext" exploit detailed <a href="https://www.3dbrew.org/wiki/3DS_System_Flaws">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
||||
### What You Need
|
||||
|
||||
* A DSiWare Backup, normally `42383841.bin` (You should have one on the root of your SD card from following [BannerBomb3](bannerbomb3))
|
||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||
* The latest release of [Frogminer_save](https://github.com/zoogie/Frogminer/releases/latest) (`Frogminer_save.zip`)
|
||||
* The latest release of [b9sTool](https://github.com/zoogie/b9sTool/releases/latest) (`boot.nds`)
|
||||
|
|
@ -27,17 +26,32 @@ As an additional safety measure, we will perform an additional check for custom
|
|||
1. Hold the (Select) button
|
||||
1. Power on your device while still holding the (Select) button
|
||||
1. If the check was successful, you will boot to the HOME Menu and you may proceed with this guide
|
||||
1. Power off your device
|
||||
|
||||
If you see a configuration menu, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
If you see a configuration menu or the console immediately powers off, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
{: .notice--danger}
|
||||
|
||||
#### Section II - Prep Work
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next section.
|
||||
|
||||
1. Reinsert your SD card into your device
|
||||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-fredtool)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Dump DSiWare"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - Prep Work
|
||||
|
||||
In this section, you will copy the files necessary to temporarily replace DS Connection Settings with Flipnote Studio, which is used to launch the boot9strap (custom firmware) installer.
|
||||
|
||||
1. Εισάγετε την κάρτα SD στον υπολογιστή σας
|
||||
1. Open the [DSIHaxInjector_new](https://jenkins.nelthorya.net/job/DSIHaxInjector_new/build?delay=0sec) website on your computer
|
||||
1. Under the "Username" field, enter any alphanumeric name (no spaces or special characters)
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file using the first "Browse..." option
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file from the root of your SD card using the first "Browse..." option
|
||||
1. Under the "MovableSed" field, upload your `movable.sed` file using the second "Browse..." option
|
||||
1. Under the "InjectionTarget" field, set the injection target to `DSinternet` (NOT memorypit)
|
||||
1. Click "Build"
|
||||
|
|
@ -46,7 +60,6 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
1. Click on the first search result
|
||||
+ This result should have the latest timestamp
|
||||
1. Click the "output_(name).zip" link
|
||||
1. Εισάγετε την κάρτα SD στον υπολογιστή σας
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
|
|
@ -60,7 +73,7 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
![]({{ "/images/screenshots/fredtool-root-layout.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section III - Overwriting DS Connection Settings
|
||||
#### Section IV - Overwriting DS Connection Settings
|
||||
|
||||
In this section, you will copy the hacked DS Connection Settings DSiWare to internal memory, which will temporarily replace it with Flipnote Studio.
|
||||
|
||||
|
|
@ -73,7 +86,7 @@ In this section, you will copy the hacked DS Connection Settings DSiWare to inte
|
|||
1. Navigate to `Internet Settings` -> `Nintendo DS Connections`, then select "OK" ([image](/images/screenshots/fredtool/dsconnection.png))
|
||||
1. If the exploit was successful, your device will have loaded the JPN version of Flipnote Studio
|
||||
|
||||
#### Section IV - Flipnote Exploit
|
||||
#### Section V - Flipnote Exploit
|
||||
|
||||
If you would prefer a visual guide to this section, one is available [here](https://zoogie.github.io/web/flipnote_directions/).
|
||||
{: .notice--info}
|
||||
|
|
@ -99,7 +112,7 @@ In this section, you will perform a series of very specific steps within Flipnot
|
|||
+ If your device shuts down when you try to power it on, ensure that you have copied `boot.firm` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ If you see the Luma Configuration screen, press (Start) to reboot, then continue with the guide
|
||||
|
||||
#### Section V - Luma3DS Verification
|
||||
#### Section VI - Luma3DS Verification
|
||||
|
||||
Due to the nature of the exploit used, it is occasionally (but rarely) possible for boot9strap to not actually get installed. This section will therefore verify that boot9strap was successfully installed by seeing if some files that are normally automatically generated by Luma3DS were created.
|
||||
|
||||
|
|
@ -113,9 +126,9 @@ At this point, your console will boot to Luma3DS by default.
|
|||
+ Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
|
||||
+ On the next page, you will install useful homebrew applications to complete your setup.
|
||||
|
||||
#### Section VI - Restoring DS Connection Settings
|
||||
#### Section VII - Restoring DS Connection Settings
|
||||
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section III.
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section IV.
|
||||
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
1. Copy the `42383841.bin` file from the `clean` folder of the downloaded DSiWare archive (output_(name).zip) to the `Nintendo DSiWare` folder, replacing the existing one
|
||||
|
|
|
|||
|
|
@ -18,45 +18,28 @@ title: "Installing boot9strap (USM)"
|
|||
|
||||
These instructions work on USA, Europe, Japan, and Korea region consoles as indicated by the letters U, E, J, or K after the system version.
|
||||
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
{: .notice--warning}
|
||||
|
||||
### What You Need
|
||||
|
||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||
* The latest release of [SafeB9SInstaller](https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip) (direct download)
|
||||
* The latest release of [boot9strap](https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip) (direct download)
|
||||
* The latest release of [Luma3DS](https://github.com/LumaTeam/Luma3DS/releases/latest) (the Luma3DS `.zip` file)
|
||||
* The latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/download/v1.3/usm.bin) (direct download)
|
||||
|
||||
|
||||
#### Section I - Prep Work
|
||||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 and unSAFE_MODE exploits onto your device's SD card.
|
||||
In this section, you will copy the files needed to trigger the unSAFE_MODE exploit onto your device's SD card.
|
||||
|
||||
1. If your device is powered on, power off your device
|
||||
1. Open [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php) on your computer
|
||||
1. Upload your movable.sed using the "Choose File" option
|
||||
1. Click "Build and Download"
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a SAFE_MODE exploit data file called `usm.bin` inside of a zip archive (`unSAFE_MODE.zip`)
|
||||
1. Εισάγετε την κάρτα SD στον υπολογιστή σας
|
||||
1. Your SD card should be inserted in your computer
|
||||
1. Copy `boot.firm` and `boot.3dsx` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||
1. Create a folder named `boot9strap` on the root of your SD card
|
||||
1. Copy `boot9strap.firm` and `boot9strap.firm.sha` from the boot9strap `.zip` to the `/boot9strap/` folder on your SD card
|
||||
1. Copy `SafeB9SInstaller.bin` from the SafeB9SInstaller `.zip` to the root of your SD card
|
||||
1. Copy `usm.bin` from `unSAFE_MODE.zip` to the root of your SD card
|
||||
![]({{ "/images/screenshots/bb3/usm-root-layout.png" | absolute_url }}){: .notice--info}
|
||||
![]({{ "/images/screenshots/boot9strap-folder.png" | absolute_url }}){: .notice--info}
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `unSAFE_MODE.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
1. Copy `usm.bin` to the root of your SD card
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
|
|
@ -66,9 +49,9 @@ In this section, you will trigger the BannerBomb3 exploit using the DSiWare Mana
|
|||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-usm-menu)
|
||||
1. Press (A) to select "Inject haxx"
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-usm)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Install unSAFE_MODE"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - unSAFE_MODE
|
||||
|
|
@ -77,7 +60,7 @@ In this section, you will enter Safe Mode (a feature available on all 3DS family
|
|||
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of BannerBomb3](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
1. Press "OK" to accept the update
|
||||
+ There is no update. This is part of the exploit
|
||||
1. Press "I accept" to accept the terms and conditions
|
||||
|
|
@ -107,8 +90,7 @@ In this section, you will trigger the BannerBomb3 exploit a second time so that
|
|||
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Restore slots"
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Uninstall unSAFE_MODE"
|
||||
+ Your device will automatically reboot
|
||||
1. Power off your device
|
||||
1. Εισάγετε την κάρτα SD στον υπολογιστή σας
|
||||
|
|
|
|||
|
|
@ -56,6 +56,7 @@ In this section, you will use the Bruteforce Movable website to retrieve your de
|
|||
+ If you are still waiting after half an hour, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask (in English) for someone there to assist you
|
||||
1. When the process is completed, download your `movable.sed` file from the site
|
||||
+ Keep this file as you will need it in the upcoming pages
|
||||
1. Power off your device
|
||||
|
||||
___
|
||||
|
||||
|
|
@ -63,11 +64,11 @@ ___
|
|||
|
||||
Once you have your device's encryption key (`movable.sed`), you will use it in conjunction with other exploits to install custom firmware on your 3DS.
|
||||
|
||||
#### unSAFE_MODE (Recommended)
|
||||
#### BannerBomb3
|
||||
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the SAFE_MODE firmware present in all 3DS units.
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the System Settings application.
|
||||
|
||||
Continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
Continue to [BannerBomb3](bannerbomb3)
|
||||
{: .notice--primary}
|
||||
|
||||
___
|
||||
|
|
|
|||
|
|
@ -126,11 +126,11 @@ If this is unsuccessful, try using another SD card.
|
|||
|
||||
## Installing boot9strap (USM)
|
||||
|
||||
### DSiWare Management menu crashes without showing USM menu
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (USM)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php).
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `usm.bin` is on the root of the SD card. If it is missing, then download the latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/latest) (the RELEASE `.zip` file), and copy the `usm.bin` file to the root of your SD card.
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, you will need to follow [an alternate branch of Seedminer](homebrew-launcher-(pichaxx)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
|
|
@ -144,16 +144,24 @@ If neither of these solutions fixes this problem, then custom firmware may have
|
|||
|
||||
### DSiWare Management shows a question mark
|
||||
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php), ensuring that you use the `movable.sed` file for your console.
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen), ensuring that you use the `movable.sed` file for your console.
|
||||
|
||||
### DSiWare Management menu crashes without purple screen
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
|
||||
---
|
||||
|
||||
## Installing boot9strap (Fredtool)
|
||||
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (Fredtool)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
### Error on Fredtool Injector page
|
||||
|
||||
Ensure that your `movable.sed` and DSiWare backup come from the same console. A mismatch will result in an error.
|
||||
|
|
|
|||
|
|
@ -6,8 +6,8 @@ title: "BannerBomb3"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>To dump system DSiWare, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system in order to dump the DSi Internet Settings application to the SD root.</p>
|
||||
<p>To launch custom code, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system.</p>
|
||||
<p>For a more technical explanation, see <a href="https://github.com/zoogie/Bannerbomb3">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
|
@ -27,38 +27,43 @@ If you have a Taiwanese console (indicated by a T after the system version), fol
|
|||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 exploit onto your device's SD card.
|
||||
|
||||
1. Open [BannerBomb3 Tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php) on your computer
|
||||
1. Upload your movable.sed using the "Choose File" option
|
||||
1. Click "Build and Download"
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` inside of a zip file (`BannerBomb3.zip`)
|
||||
1. If your console is powered on, power off your console
|
||||
1. Power off ye device
|
||||
1. Insert ye SD card into ye computer
|
||||
1. Open [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen) on your computer
|
||||
1. Upload your movable.sed using the “Choose File” option
|
||||
1. Click “Build and Download”
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a payload called `bb3.bin` inside of a zip archive (`DSIWARE_EXPLOIT.zip`)
|
||||
1. Copy `bb3.bin` from `DSIWARE_EXPLOIT.zip` to the root of your SD card
|
||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `BannerBomb3.zip` to the `Nintendo DSiWare` folder
|
||||
1. Copy the `F00D43D5.bin` file from `DSIWARE_EXPLOIT.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
#### Section II - Hardware Button Check
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next page.
|
||||
In this section, you will test the SAFE_MODE function of your device. This will determine which method you will follow in the next page.
|
||||
|
||||
1. Reinsert ye SD card into ye device
|
||||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare` -> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your system should flash Magenta (pink/purple) and then crash a few seconds later. This means it worked
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
1. If prompted to update, press Cancel
|
||||
+ If the device boots to the HOME Menu, just continue to the next step
|
||||
1. Power off ye device
|
||||
1. Insert ye SD card into ye computer
|
||||
1. You should now have `42383841.bin` on the root of your SD card. Copy this file to somewhere on your computer, as you will use it on the next page
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
1. Delete `F00D43D5.bin` from your Nintendo DSiWare folder and from your computer. This file will not be needed anymore
|
||||
|
||||
___
|
||||
|
||||
Continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
### Next steps: Choose an exploit
|
||||
|
||||
If your device booted into Safe Mode and prompted to you to do a system update in Section II, Safe Mode is working on your device.
|
||||
|
||||
If your device booted into Safe Mode, continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
{: .notice--primary}
|
||||
|
||||
If your device did NOT boot into Safe Mode, continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
{: .notice--warning}
|
||||
|
|
|
|||
|
|
@ -6,14 +6,13 @@ title: "Installing boot9strap (Fredtool)"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application. This requires you to have a DSiWare backup, which you should have gotten in the previous section.</p>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application.</p>
|
||||
<p>This is a currently working implementation of the "FIRM partitions known-plaintext" exploit detailed <a href="https://www.3dbrew.org/wiki/3DS_System_Flaws">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
||||
### What You Need
|
||||
|
||||
* A DSiWare Backup, normally `42383841.bin` (You should have one on the root of your SD card from following [BannerBomb3](bannerbomb3))
|
||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||
* The latest release of [Frogminer_save](https://github.com/zoogie/Frogminer/releases/latest) (`Frogminer_save.zip`)
|
||||
* The latest release of [b9sTool](https://github.com/zoogie/b9sTool/releases/latest) (`boot.nds`)
|
||||
|
|
@ -27,17 +26,32 @@ As an additional safety measure, we will perform an additional check for custom
|
|||
1. Hold the (Select) button
|
||||
1. Power on your device while still holding the (Select) button
|
||||
1. If the check was successful, you will boot to the HOME Menu and you may proceed with this guide
|
||||
1. Power off ye device
|
||||
|
||||
If you see a configuration menu, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
If you see a configuration menu or the console immediately powers off, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
{: .notice--danger}
|
||||
|
||||
#### Section II - Prep Work
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next section.
|
||||
|
||||
1. Reinsert ye SD card into ye device
|
||||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-fredtool)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Dump DSiWare"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - Prep Work
|
||||
|
||||
In this section, you will copy the files necessary to temporarily replace DS Connection Settings with Flipnote Studio, which is used to launch the boot9strap (custom firmware) installer.
|
||||
|
||||
1. Insert ye SD card into ye computer
|
||||
1. Open the [DSIHaxInjector_new](https://jenkins.nelthorya.net/job/DSIHaxInjector_new/build?delay=0sec) website on your computer
|
||||
1. Under the "Username" field, enter any alphanumeric name (no spaces or special characters)
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file using the first "Browse..." option
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file from the root of your SD card using the first "Browse..." option
|
||||
1. Under the "MovableSed" field, upload your `movable.sed` file using the second "Browse..." option
|
||||
1. Under the "InjectionTarget" field, set the injection target to `DSinternet` (NOT memorypit)
|
||||
1. Click "Build"
|
||||
|
|
@ -46,7 +60,6 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
1. Click on the first search result
|
||||
+ This result should have the latest timestamp
|
||||
1. Click the "output_(name).zip" link
|
||||
1. Insert ye SD card into ye computer
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
|
|
@ -60,7 +73,7 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
![]({{ "/images/screenshots/fredtool-root-layout.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section III - Overwriting DS Connection Settings
|
||||
#### Section IV - Overwriting DS Connection Settings
|
||||
|
||||
In this section, you will copy the hacked DS Connection Settings DSiWare to internal memory, which will temporarily replace it with Flipnote Studio.
|
||||
|
||||
|
|
@ -73,7 +86,7 @@ In this section, you will copy the hacked DS Connection Settings DSiWare to inte
|
|||
1. Navigate to `Internet Settings` -> `Nintendo DS Connections`, then select "OK" ([image](/images/screenshots/fredtool/dsconnection.png))
|
||||
1. If the exploit was successful, your device will have loaded the JPN version of Flipnote Studio
|
||||
|
||||
#### Section IV - Flipnote Exploit
|
||||
#### Section V - Flipnote Exploit
|
||||
|
||||
If you would prefer a visual guide to this section, one is available [here](https://zoogie.github.io/web/flipnote_directions/).
|
||||
{: .notice--info}
|
||||
|
|
@ -99,7 +112,7 @@ In this section, you will perform a series of very specific steps within Flipnot
|
|||
+ If your device shuts down when you try to power it on, ensure that you have copied `boot.firm` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ If you see the Luma Configuration screen, press (Start) to reboot, then continue with the guide
|
||||
|
||||
#### Section V - Luma3DS Verification
|
||||
#### Section VI - Luma3DS Verification
|
||||
|
||||
Due to the nature of the exploit used, it is occasionally (but rarely) possible for boot9strap to not actually get installed. This section will therefore verify that boot9strap was successfully installed by seeing if some files that are normally automatically generated by Luma3DS were created.
|
||||
|
||||
|
|
@ -113,9 +126,9 @@ At this point, your console will boot to Luma3DS by default.
|
|||
+ Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
|
||||
+ On the next page, you will install useful homebrew applications to complete your setup.
|
||||
|
||||
#### Section VI - Restoring DS Connection Settings
|
||||
#### Section VII - Restoring DS Connection Settings
|
||||
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section III.
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section IV.
|
||||
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
1. Copy the `42383841.bin` file from the `clean` folder of the downloaded DSiWare archive (output_(name).zip) to the `Nintendo DSiWare` folder, replacing the existing one
|
||||
|
|
|
|||
|
|
@ -18,45 +18,28 @@ title: "Installing boot9strap (USM)"
|
|||
|
||||
These instructions work on USA, Europe, Japan, and Korea region consoles as indicated by the letters U, E, J, or K after the system version.
|
||||
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
{: .notice--warning}
|
||||
|
||||
### What You Need
|
||||
|
||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||
* The latest release of [SafeB9SInstaller](https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip) (direct download)
|
||||
* The latest release of [boot9strap](https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip) (direct download)
|
||||
* The latest release of [Luma3DS](https://github.com/LumaTeam/Luma3DS/releases/latest) (the Luma3DS `.zip` file)
|
||||
* The latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/download/v1.3/usm.bin) (direct download)
|
||||
|
||||
|
||||
#### Section I - Prep Work
|
||||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 and unSAFE_MODE exploits onto your device's SD card.
|
||||
In this section, you will copy the files needed to trigger the unSAFE_MODE exploit onto your device's SD card.
|
||||
|
||||
1. If your device is powered on, power off your device
|
||||
1. Open [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php) on your computer
|
||||
1. Upload your movable.sed using the "Choose File" option
|
||||
1. Click "Build and Download"
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a SAFE_MODE exploit data file called `usm.bin` inside of a zip archive (`unSAFE_MODE.zip`)
|
||||
1. Insert ye SD card into ye computer
|
||||
1. Your SD card should be inserted in your computer
|
||||
1. Copy `boot.firm` and `boot.3dsx` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||
1. Create a folder named `boot9strap` on th' root 'o ye SD card
|
||||
1. Copy `boot9strap.firm` 'n `boot9strap.firm.sha` from th' boot9strap `.zip` to th' `/boot9strap/` folder on ye SD card
|
||||
1. Copy `SafeB9SInstaller.bin` from the SafeB9SInstaller `.zip` to the root of your SD card
|
||||
1. Copy `usm.bin` from `unSAFE_MODE.zip` to the root of your SD card
|
||||
![]({{ "/images/screenshots/bb3/usm-root-layout.png" | absolute_url }}){: .notice--info}
|
||||
![]({{ "/images/screenshots/boot9strap-folder.png" | absolute_url }}){: .notice--info}
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `unSAFE_MODE.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
1. Copy `usm.bin` to the root of your SD card
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
|
|
@ -66,9 +49,9 @@ In this section, you will trigger the BannerBomb3 exploit using the DSiWare Mana
|
|||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-usm-menu)
|
||||
1. Press (A) to select "Inject haxx"
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-usm)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Install unSAFE_MODE"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - unSAFE_MODE
|
||||
|
|
@ -77,7 +60,7 @@ In this section, you will enter Safe Mode (a feature available on all 3DS family
|
|||
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of BannerBomb3](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
1. Press "OK" to accept the update
|
||||
+ There is no update. This is part of the exploit
|
||||
1. Press "I accept" to accept the terms and conditions
|
||||
|
|
@ -107,8 +90,7 @@ In this section, you will trigger the BannerBomb3 exploit a second time so that
|
|||
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Restore slots"
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Uninstall unSAFE_MODE"
|
||||
+ Your device will automatically reboot
|
||||
1. Power off ye device
|
||||
1. Insert ye SD card into ye computer
|
||||
|
|
|
|||
|
|
@ -56,6 +56,7 @@ In this section, you will use the Bruteforce Movable website to retrieve your de
|
|||
+ If you are still waiting after half an hour, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask (in English) for someone there to assist you
|
||||
1. When the process is completed, download your `movable.sed` file from the site
|
||||
+ Keep this file as you will need it in the upcoming pages
|
||||
1. Power off ye device
|
||||
|
||||
___
|
||||
|
||||
|
|
@ -63,11 +64,11 @@ ___
|
|||
|
||||
Once you have your device's encryption key (`movable.sed`), you will use it in conjunction with other exploits to install custom firmware on your 3DS.
|
||||
|
||||
#### unSAFE_MODE (Recommended)
|
||||
#### BannerBomb3
|
||||
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the SAFE_MODE firmware present in all 3DS units.
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the System Settings application.
|
||||
|
||||
Continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
Continue to [BannerBomb3](bannerbomb3)
|
||||
{: .notice--primary}
|
||||
|
||||
___
|
||||
|
|
|
|||
|
|
@ -126,11 +126,11 @@ If this is unsuccessful, try using another SD card.
|
|||
|
||||
## Installing boot9strap (USM)
|
||||
|
||||
### DSiWare Management menu crashes without showing USM menu
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (USM)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php).
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `usm.bin` is on the root of the SD card. If it is missing, then download the latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/latest) (the RELEASE `.zip` file), and copy the `usm.bin` file to the root of your SD card.
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, you will need to follow [an alternate branch of Seedminer](homebrew-launcher-(pichaxx)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
|
|
@ -144,16 +144,24 @@ If neither of these solutions fixes this problem, then custom firmware may have
|
|||
|
||||
### DSiWare Management shows a question mark
|
||||
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php), ensuring that you use the `movable.sed` file for your console.
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen), ensuring that you use the `movable.sed` file for your console.
|
||||
|
||||
### DSiWare Management menu crashes without purple screen
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
|
||||
---
|
||||
|
||||
## Installing boot9strap (Fredtool)
|
||||
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (Fredtool)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
### Error on Fredtool Injector page
|
||||
|
||||
Ensure that your `movable.sed` and DSiWare backup come from the same console. A mismatch will result in an error.
|
||||
|
|
|
|||
|
|
@ -6,8 +6,8 @@ title: "BannerBomb3"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>To dump system DSiWare, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system in order to dump the DSi Internet Settings application to the SD root.</p>
|
||||
<p>To launch custom code, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system.</p>
|
||||
<p>For a more technical explanation, see <a href="https://github.com/zoogie/Bannerbomb3">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
|
@ -27,38 +27,43 @@ If you have a Taiwanese console (indicated by a T after the system version), fol
|
|||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 exploit onto your device's SD card.
|
||||
|
||||
1. Abre [BannerBomb3 Tool](https://bb3.nhnarwhal.com/3dstools/bannerbomb3.php) en tu computadora
|
||||
1. Carga tu movable.sed usando la opción "Choose File"
|
||||
1. Haz click en "Build and Download"
|
||||
+ Esto descargará un archivo de DSiWare exploitado, llamado `F00D43D5.bin`, dentro de un archivo zip (`BannerBomb3.zip`)
|
||||
1. Si tu consola está encendida, apagala
|
||||
1. Apaga tu consola
|
||||
1. Inserta tu tarjeta SD en tu computadora
|
||||
1. Open [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen) on your computer
|
||||
1. Upload your movable.sed using the “Choose File” option
|
||||
1. Click “Build and Download”
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a payload called `bb3.bin` inside of a zip archive (`DSIWARE_EXPLOIT.zip`)
|
||||
1. Copy `bb3.bin` from `DSIWARE_EXPLOIT.zip` to the root of your SD card
|
||||
+ La raíz de tu tarjeta SD se refiere al primer directorio de la tarjeta, donde puedes ver la carpeta Nintendo 3DS pero no estás dentro de ella
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `BannerBomb3.zip` to the `Nintendo DSiWare` folder
|
||||
1. Copy the `F00D43D5.bin` file from `DSIWARE_EXPLOIT.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Sección II - BannerBomb3
|
||||
#### Section II - Hardware Button Check
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next page.
|
||||
In this section, you will test the SAFE_MODE function of your device. This will determine which method you will follow in the next page.
|
||||
|
||||
1. Vuelve a insertar tu tarjeta SD en tu consola
|
||||
1. Enciende tu consola
|
||||
1. Entra a Configuración de la consola
|
||||
1. Navigate to `Data Management` -> `DSiWare` -> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Tu sistema debería parpadear el color magenta (rosa/púrpura) y luego crashear unos segundos después. Esto significa que funcionó
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
1. If prompted to update, press Cancel
|
||||
+ If the device boots to the HOME Menu, just continue to the next step
|
||||
1. Apaga tu consola
|
||||
1. Inserta tu tarjeta SD en tu computadora
|
||||
1. You should now have `42383841.bin` on the root of your SD card. Copy this file to somewhere on your computer, as you will use it on the next page
|
||||
1. Ve a `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` en tu tarjeta SD
|
||||
1. Delete `F00D43D5.bin` from your Nintendo DSiWare folder and from your computer. Este archivo ya no será necesario
|
||||
|
||||
___
|
||||
|
||||
Continúa en [Instalar boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
### Next steps: Choose an exploit
|
||||
|
||||
If your device booted into Safe Mode and prompted to you to do a system update in Section II, Safe Mode is working on your device.
|
||||
|
||||
If your device booted into Safe Mode, continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
{: .notice--primary}
|
||||
|
||||
If your device did NOT boot into Safe Mode, continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
{: .notice--warning}
|
||||
|
|
|
|||
|
|
@ -6,14 +6,13 @@ title: "Installing boot9strap (Fredtool)"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application. This requires you to have a DSiWare backup, which you should have gotten in the previous section.</p>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application.</p>
|
||||
<p>This is a currently working implementation of the "FIRM partitions known-plaintext" exploit detailed <a href="https://www.3dbrew.org/wiki/3DS_System_Flaws">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
||||
### Qué necesitas
|
||||
|
||||
* A DSiWare Backup, normally `42383841.bin` (You should have one on the root of your SD card from following [BannerBomb3](bannerbomb3))
|
||||
* Tu archivo `movable.sed` proveniente de haber completado [Seedminer](seedminer)
|
||||
* The latest release of [Frogminer_save](https://github.com/zoogie/Frogminer/releases/latest) (`Frogminer_save.zip`)
|
||||
* The latest release of [b9sTool](https://github.com/zoogie/b9sTool/releases/latest) (`boot.nds`)
|
||||
|
|
@ -27,17 +26,32 @@ As an additional safety measure, we will perform an additional check for custom
|
|||
1. Mantén pulsado el botón (Select)
|
||||
1. Enciende la consola mientras mantienes presionado (Select)
|
||||
1. If the check was successful, you will boot to the HOME Menu and you may proceed with this guide
|
||||
1. Apaga tu consola
|
||||
|
||||
If you see a configuration menu, you already have CFW, and continuing with these instructions may BRICK your device! Sigue la sección de [Comprobación de CFW](checking-for-cfw) para actualizar tu CFW existente.
|
||||
If you see a configuration menu or the console immediately powers off, you already have CFW, and continuing with these instructions may BRICK your device! Sigue la sección de [Comprobación de CFW](checking-for-cfw) para actualizar tu CFW existente.
|
||||
{: .notice--danger}
|
||||
|
||||
#### Sección II - Preparativos
|
||||
#### Sección II - BannerBomb3
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next section.
|
||||
|
||||
1. Vuelve a insertar tu tarjeta SD en tu consola
|
||||
1. Enciende tu consola
|
||||
1. Entra a Configuración de la consola
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-fredtool)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Dump DSiWare"
|
||||
+ Tu consola se apagará automáticamente
|
||||
|
||||
#### Section III - Prep Work
|
||||
|
||||
In this section, you will copy the files necessary to temporarily replace DS Connection Settings with Flipnote Studio, which is used to launch the boot9strap (custom firmware) installer.
|
||||
|
||||
1. Inserta tu tarjeta SD en tu computadora
|
||||
1. Open the [DSIHaxInjector_new](https://jenkins.nelthorya.net/job/DSIHaxInjector_new/build?delay=0sec) website on your computer
|
||||
1. Under the "Username" field, enter any alphanumeric name (no spaces or special characters)
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file using the first "Browse..." option
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file from the root of your SD card using the first "Browse..." option
|
||||
1. Under the "MovableSed" field, upload your `movable.sed` file using the second "Browse..." option
|
||||
1. Under the "InjectionTarget" field, set the injection target to `DSinternet` (NOT memorypit)
|
||||
1. Click "Build"
|
||||
|
|
@ -46,7 +60,6 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
1. Click on the first search result
|
||||
+ This result should have the latest timestamp
|
||||
1. Click the "output_(name).zip" link
|
||||
1. Inserta tu tarjeta SD en tu computadora
|
||||
1. Ve a `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` en tu tarjeta SD
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
|
|
@ -60,7 +73,7 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
![]({{ "/images/screenshots/fredtool-root-layout.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section III - Overwriting DS Connection Settings
|
||||
#### Section IV - Overwriting DS Connection Settings
|
||||
|
||||
In this section, you will copy the hacked DS Connection Settings DSiWare to internal memory, which will temporarily replace it with Flipnote Studio.
|
||||
|
||||
|
|
@ -73,7 +86,7 @@ In this section, you will copy the hacked DS Connection Settings DSiWare to inte
|
|||
1. Navigate to `Internet Settings` -> `Nintendo DS Connections`, then select "OK" ([image](/images/screenshots/fredtool/dsconnection.png))
|
||||
1. Si el exploit fue exitoso, tu consola habrá cargado la versión japonesa de Flipnote Studio
|
||||
|
||||
#### Sección IV - Exploit de Flipnote
|
||||
#### Section V - Flipnote Exploit
|
||||
|
||||
Si prefieres una guía visual para esta parte, hay una disponible [aquí](https://zoogie.github.io/web/flipnote_directions/).
|
||||
{: .notice--info}
|
||||
|
|
@ -99,7 +112,7 @@ In this section, you will perform a series of very specific steps within Flipnot
|
|||
+ If your device shuts down when you try to power it on, ensure that you have copied `boot.firm` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ If you see the Luma Configuration screen, press (Start) to reboot, then continue with the guide
|
||||
|
||||
#### Section V - Luma3DS Verification
|
||||
#### Section VI - Luma3DS Verification
|
||||
|
||||
Due to the nature of the exploit used, it is occasionally (but rarely) possible for boot9strap to not actually get installed. This section will therefore verify that boot9strap was successfully installed by seeing if some files that are normally automatically generated by Luma3DS were created.
|
||||
|
||||
|
|
@ -113,9 +126,9 @@ At this point, your console will boot to Luma3DS by default.
|
|||
+ Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
|
||||
+ On the next page, you will install useful homebrew applications to complete your setup.
|
||||
|
||||
#### Sección VI - Restaurar Conexiones de Nintendo DS
|
||||
#### Section VII - Restoring DS Connection Settings
|
||||
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section III.
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section IV.
|
||||
|
||||
1. Ve a `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` en tu tarjeta SD
|
||||
1. Copy the `42383841.bin` file from the `clean` folder of the downloaded DSiWare archive (output_(name).zip) to the `Nintendo DSiWare` folder, replacing the existing one
|
||||
|
|
|
|||
|
|
@ -18,45 +18,28 @@ title: "Instalar boot9strap (USM)"
|
|||
|
||||
Estas instrucciones funcionan en consolas de las regiones USA, Europa, Japón y Corea, indicado por las letras U, E, J o K después de la versión del sistema.
|
||||
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
{: .notice--warning}
|
||||
|
||||
### Qué necesitas
|
||||
|
||||
* Tu archivo `movable.sed` proveniente de haber completado [Seedminer](seedminer)
|
||||
* The latest release of [SafeB9SInstaller](https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip) (direct download)
|
||||
* The latest release of [boot9strap](https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip) (direct download)
|
||||
* The latest release of [Luma3DS](https://github.com/LumaTeam/Luma3DS/releases/latest) (the Luma3DS `.zip` file)
|
||||
* The latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/download/v1.3/usm.bin) (direct download)
|
||||
|
||||
|
||||
#### Sección I - Preparativos
|
||||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 and unSAFE_MODE exploits onto your device's SD card.
|
||||
In this section, you will copy the files needed to trigger the unSAFE_MODE exploit onto your device's SD card.
|
||||
|
||||
1. Si tu consola está encendida, apágala
|
||||
1. Abre [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php) en tu computadora
|
||||
1. Carga tu movable.sed usando la opción "Choose File"
|
||||
1. Haz click en "Build and Download"
|
||||
+ Esto descargará un archivo de DSiWare exploitado, llamado `F00D43D5.bin`, y un archivo de datos para el exploit de SAFE_MODE llamado `usm.bin`, ambos dentro de un archivo zip (`unSAFE_MODE.zip`)
|
||||
1. Inserta tu tarjeta SD en tu computadora
|
||||
1. Your SD card should be inserted in your computer
|
||||
1. Copia los archivos `boot.firm` y `boot.3dsx` desde el `.zip` de Luma3DS a la raíz de tu tarjeta SD
|
||||
+ La raíz de tu tarjeta SD se refiere al primer directorio de la tarjeta, donde puedes ver la carpeta Nintendo 3DS pero no estás dentro de ella
|
||||
1. Crea una carpeta llamada `boot9strap` en la raíz de tu tarjeta SD
|
||||
1. Copia `boot9strap.firm` y `boot9strap.firm.sha` desde el `.zip` de `boot9strap` a la carpeta `/boot9strap/` en tu tarjeta SD
|
||||
1. Copia `SafeB9SInstaller.bin` desde el `.zip` de SafeB9SInstaller a la raíz de tu tarjeta SD
|
||||
1. Copia el archivo `usm.bin` desde `unSAFE_MODE.zip` a la raíz de tu tarjeta SD
|
||||
![]({{ "/images/screenshots/bb3/usm-root-layout.png" | absolute_url }}){: .notice--info}
|
||||
![]({{ "/images/screenshots/boot9strap-folder.png" | absolute_url }}){: .notice--info}
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copia el archivo `F00D43D5.bin` desde `unSAFE_MODE.zip` a la carpeta `Nintendo DSiWare`
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
1. Copy `usm.bin` to the root of your SD card
|
||||
|
||||
#### Sección II - BannerBomb3
|
||||
|
||||
|
|
@ -66,9 +49,9 @@ In this section, you will trigger the BannerBomb3 exploit using the DSiWare Mana
|
|||
1. Enciende tu consola
|
||||
1. Entra a Configuración de la consola
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-usm-menu)
|
||||
1. Press (A) to select "Inject haxx"
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-usm)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Install unSAFE_MODE"
|
||||
+ Tu consola se apagará automáticamente
|
||||
|
||||
#### Sección III - unSAFE_MODE
|
||||
|
|
@ -77,7 +60,7 @@ In this section, you will enter Safe Mode (a feature available on all 3DS family
|
|||
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of BannerBomb3](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
1. Presiona "OK" para aceptar la actualización
|
||||
+ No hay actualización. Esto es parte del exploit
|
||||
1. Presiona sobre "Acepto" para aceptar los términos y condiciones
|
||||
|
|
@ -107,8 +90,7 @@ In this section, you will trigger the BannerBomb3 exploit a second time so that
|
|||
|
||||
1. Entra a Configuración de la consola
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Restore slots"
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Uninstall unSAFE_MODE"
|
||||
+ Your device will automatically reboot
|
||||
1. Apaga tu consola
|
||||
1. Inserta tu tarjeta SD en tu computadora
|
||||
|
|
|
|||
|
|
@ -56,6 +56,7 @@ In this section, you will use the Bruteforce Movable website to retrieve your de
|
|||
+ If you are still waiting after half an hour, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask (in English) for someone there to assist you
|
||||
1. When the process is completed, download your `movable.sed` file from the site
|
||||
+ Conserva este archivo ya que lo necesitarás en las próximas páginas
|
||||
1. Apaga tu consola
|
||||
|
||||
___
|
||||
|
||||
|
|
@ -63,11 +64,11 @@ ___
|
|||
|
||||
Once you have your device's encryption key (`movable.sed`), you will use it in conjunction with other exploits to install custom firmware on your 3DS.
|
||||
|
||||
#### unSAFE_MODE (Recommended)
|
||||
#### BannerBomb3
|
||||
|
||||
Éste método que emplea Seedminer para mayor acceso utiliza tu archivo `movable.sed` para tomar ventaja de exploits en el firmware SAFE_MODE presente en todas las consolas 3DS.
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the System Settings application.
|
||||
|
||||
Continúa a [Instalar boot9strap (USM)](installing-boot9strap-(usm))
|
||||
Continue to [BannerBomb3](bannerbomb3)
|
||||
{: .notice--primary}
|
||||
|
||||
___
|
||||
|
|
|
|||
|
|
@ -126,11 +126,11 @@ If this is unsuccessful, try using another SD card.
|
|||
|
||||
## Instalar boot9strap (USM)
|
||||
|
||||
### El menú de Gestión de DSiWare crashea sin mostrar el menú de USM
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (USM)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. Si lo es, entonces vuelve a crear el archivo con [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php).
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `usm.bin` is on the root of the SD card. If it is missing, then download the latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/latest) (the RELEASE `.zip` file), and copy the `usm.bin` file to the root of your SD card.
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, you will need to follow [an alternate branch of Seedminer](homebrew-launcher-(pichaxx)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
|
|
@ -144,16 +144,24 @@ If neither of these solutions fixes this problem, then custom firmware may have
|
|||
|
||||
### Gestión de DSiWare muestra un signo de interrogación
|
||||
|
||||
Puede haber un problema con el archivo `F00D43D5.bin` (puede estar corrupto o preparado para otra consola 3DS). Re-create your `F00D43D5.bin` file with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php), ensuring that you use the `movable.sed` file for your console.
|
||||
Puede haber un problema con el archivo `F00D43D5.bin` (puede estar corrupto o preparado para otra consola 3DS). Re-create your `F00D43D5.bin` file with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen), ensuring that you use the `movable.sed` file for your console.
|
||||
|
||||
### El menú de Gestión de DSiWare crashea sin mostrar la pantalla morada
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. Si lo es, entonces vuelve a crear el archivo con [BannerBomb3](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php). Si sigue fallando, entonces es posible que se haya instalado y desinstalado Custom Firmware en la consola, de una manera que no permite impide ejecutar este método. En este caso, entra al [Discord de Nintendo Homebrew](https://discord.gg/MWxPgEp) para obtener ayuda.
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen). Si sigue fallando, entonces es posible que se haya instalado y desinstalado Custom Firmware en la consola, de una manera que no permite impide ejecutar este método. En este caso, entra al [Discord de Nintendo Homebrew](https://discord.gg/MWxPgEp) para obtener ayuda.
|
||||
|
||||
---
|
||||
|
||||
## Instalar boot9strap (Fredtool)
|
||||
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (Fredtool)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
### Error en la página de Fredtool Injector
|
||||
|
||||
Asegúrate de que tu archivo `movable.sed` y la copia de seguridad de DSiWare provienen de la misma consola. El error aparece cuando los archivos no coinciden.
|
||||
|
|
|
|||
|
|
@ -6,8 +6,8 @@ title: "BannerBomb3"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>To dump system DSiWare, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system in order to dump the DSi Internet Settings application to the SD root.</p>
|
||||
<p>To launch custom code, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system.</p>
|
||||
<p>For a more technical explanation, see <a href="https://github.com/zoogie/Bannerbomb3">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
|
@ -27,38 +27,43 @@ If you have a Taiwanese console (indicated by a T after the system version), fol
|
|||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 exploit onto your device's SD card.
|
||||
|
||||
1. Open [BannerBomb3 Tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php) on your computer
|
||||
1. Upload your movable.sed using the "Choose File" option
|
||||
1. Click "Build and Download"
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` inside of a zip file (`BannerBomb3.zip`)
|
||||
1. If your console is powered on, power off your console
|
||||
1. Sammuta konsolisi
|
||||
1. Aseta SD-korttisi tietokoneeseesi
|
||||
1. Open [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen) on your computer
|
||||
1. Upload your movable.sed using the “Choose File” option
|
||||
1. Click “Build and Download”
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a payload called `bb3.bin` inside of a zip archive (`DSIWARE_EXPLOIT.zip`)
|
||||
1. Copy `bb3.bin` from `DSIWARE_EXPLOIT.zip` to the root of your SD card
|
||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `BannerBomb3.zip` to the `Nintendo DSiWare` folder
|
||||
1. Copy the `F00D43D5.bin` file from `DSIWARE_EXPLOIT.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
#### Section II - Hardware Button Check
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next page.
|
||||
In this section, you will test the SAFE_MODE function of your device. This will determine which method you will follow in the next page.
|
||||
|
||||
1. Aseta SD-korttisi takaisin konsoliisi
|
||||
1. Käynnistä konsolisi
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare` -> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your system should flash Magenta (pink/purple) and then crash a few seconds later. This means it worked
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
1. If prompted to update, press Cancel
|
||||
+ If the device boots to the HOME Menu, just continue to the next step
|
||||
1. Sammuta konsolisi
|
||||
1. Aseta SD-korttisi tietokoneeseesi
|
||||
1. You should now have `42383841.bin` on the root of your SD card. Copy this file to somewhere on your computer, as you will use it on the next page
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
1. Delete `F00D43D5.bin` from your Nintendo DSiWare folder and from your computer. This file will not be needed anymore
|
||||
|
||||
___
|
||||
|
||||
Continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
### Next steps: Choose an exploit
|
||||
|
||||
If your device booted into Safe Mode and prompted to you to do a system update in Section II, Safe Mode is working on your device.
|
||||
|
||||
If your device booted into Safe Mode, continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
{: .notice--primary}
|
||||
|
||||
If your device did NOT boot into Safe Mode, continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
{: .notice--warning}
|
||||
|
|
|
|||
|
|
@ -6,14 +6,13 @@ title: "Installing boot9strap (Fredtool)"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application. This requires you to have a DSiWare backup, which you should have gotten in the previous section.</p>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application.</p>
|
||||
<p>This is a currently working implementation of the "FIRM partitions known-plaintext" exploit detailed <a href="https://www.3dbrew.org/wiki/3DS_System_Flaws">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
||||
### Tarpeet
|
||||
|
||||
* A DSiWare Backup, normally `42383841.bin` (You should have one on the root of your SD card from following [BannerBomb3](bannerbomb3))
|
||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||
* The latest release of [Frogminer_save](https://github.com/zoogie/Frogminer/releases/latest) (`Frogminer_save.zip`)
|
||||
* The latest release of [b9sTool](https://github.com/zoogie/b9sTool/releases/latest) (`boot.nds`)
|
||||
|
|
@ -27,17 +26,32 @@ As an additional safety measure, we will perform an additional check for custom
|
|||
1. Hold the (Select) button
|
||||
1. Power on your device while still holding the (Select) button
|
||||
1. If the check was successful, you will boot to the HOME Menu and you may proceed with this guide
|
||||
1. Sammuta konsolisi
|
||||
|
||||
If you see a configuration menu, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
If you see a configuration menu or the console immediately powers off, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
{: .notice--danger}
|
||||
|
||||
#### Section II - Prep Work
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next section.
|
||||
|
||||
1. Aseta SD-korttisi takaisin konsoliisi
|
||||
1. Käynnistä konsolisi
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-fredtool)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Dump DSiWare"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - Prep Work
|
||||
|
||||
In this section, you will copy the files necessary to temporarily replace DS Connection Settings with Flipnote Studio, which is used to launch the boot9strap (custom firmware) installer.
|
||||
|
||||
1. Aseta SD-korttisi tietokoneeseesi
|
||||
1. Open the [DSIHaxInjector_new](https://jenkins.nelthorya.net/job/DSIHaxInjector_new/build?delay=0sec) website on your computer
|
||||
1. Under the "Username" field, enter any alphanumeric name (no spaces or special characters)
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file using the first "Browse..." option
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file from the root of your SD card using the first "Browse..." option
|
||||
1. Under the "MovableSed" field, upload your `movable.sed` file using the second "Browse..." option
|
||||
1. Under the "InjectionTarget" field, set the injection target to `DSinternet` (NOT memorypit)
|
||||
1. Click "Build"
|
||||
|
|
@ -46,7 +60,6 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
1. Click on the first search result
|
||||
+ This result should have the latest timestamp
|
||||
1. Click the "output_(name).zip" link
|
||||
1. Aseta SD-korttisi tietokoneeseesi
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
|
|
@ -60,7 +73,7 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
![]({{ "/images/screenshots/fredtool-root-layout.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section III - Overwriting DS Connection Settings
|
||||
#### Section IV - Overwriting DS Connection Settings
|
||||
|
||||
In this section, you will copy the hacked DS Connection Settings DSiWare to internal memory, which will temporarily replace it with Flipnote Studio.
|
||||
|
||||
|
|
@ -73,7 +86,7 @@ In this section, you will copy the hacked DS Connection Settings DSiWare to inte
|
|||
1. Navigate to `Internet Settings` -> `Nintendo DS Connections`, then select "OK" ([image](/images/screenshots/fredtool/dsconnection.png))
|
||||
1. If the exploit was successful, your device will have loaded the JPN version of Flipnote Studio
|
||||
|
||||
#### Section IV - Flipnote Exploit
|
||||
#### Section V - Flipnote Exploit
|
||||
|
||||
If you would prefer a visual guide to this section, one is available [here](https://zoogie.github.io/web/flipnote_directions/).
|
||||
{: .notice--info}
|
||||
|
|
@ -99,7 +112,7 @@ In this section, you will perform a series of very specific steps within Flipnot
|
|||
+ If your device shuts down when you try to power it on, ensure that you have copied `boot.firm` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ If you see the Luma Configuration screen, press (Start) to reboot, then continue with the guide
|
||||
|
||||
#### Section V - Luma3DS Verification
|
||||
#### Section VI - Luma3DS Verification
|
||||
|
||||
Due to the nature of the exploit used, it is occasionally (but rarely) possible for boot9strap to not actually get installed. This section will therefore verify that boot9strap was successfully installed by seeing if some files that are normally automatically generated by Luma3DS were created.
|
||||
|
||||
|
|
@ -113,9 +126,9 @@ At this point, your console will boot to Luma3DS by default.
|
|||
+ Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
|
||||
+ On the next page, you will install useful homebrew applications to complete your setup.
|
||||
|
||||
#### Section VI - Restoring DS Connection Settings
|
||||
#### Section VII - Restoring DS Connection Settings
|
||||
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section III.
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section IV.
|
||||
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
1. Copy the `42383841.bin` file from the `clean` folder of the downloaded DSiWare archive (output_(name).zip) to the `Nintendo DSiWare` folder, replacing the existing one
|
||||
|
|
|
|||
|
|
@ -18,45 +18,28 @@ title: "Installing boot9strap (USM)"
|
|||
|
||||
These instructions work on USA, Europe, Japan, and Korea region consoles as indicated by the letters U, E, J, or K after the system version.
|
||||
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
{: .notice--warning}
|
||||
|
||||
### Tarpeet
|
||||
|
||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||
* The latest release of [SafeB9SInstaller](https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip) (direct download)
|
||||
* The latest release of [boot9strap](https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip) (direct download)
|
||||
* The latest release of [Luma3DS](https://github.com/LumaTeam/Luma3DS/releases/latest) (the Luma3DS `.zip` file)
|
||||
* The latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/download/v1.3/usm.bin) (direct download)
|
||||
|
||||
|
||||
#### Vaihe I – Valmistelut
|
||||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 and unSAFE_MODE exploits onto your device's SD card.
|
||||
In this section, you will copy the files needed to trigger the unSAFE_MODE exploit onto your device's SD card.
|
||||
|
||||
1. If your device is powered on, power off your device
|
||||
1. Open [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php) on your computer
|
||||
1. Upload your movable.sed using the "Choose File" option
|
||||
1. Click "Build and Download"
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a SAFE_MODE exploit data file called `usm.bin` inside of a zip archive (`unSAFE_MODE.zip`)
|
||||
1. Aseta SD-korttisi tietokoneeseesi
|
||||
1. Your SD card should be inserted in your computer
|
||||
1. Copy `boot.firm` and `boot.3dsx` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||
1. Luo `boot9strap`-niminen kansio SD-korttisi juureen
|
||||
1. Kopioi boot9strap-`.zip`-pakkauksesta `boot9strap.firm` ja `boot9strap.firm.sha` SD-korttisi `/boot9strap/`-kansioon
|
||||
1. Copy `SafeB9SInstaller.bin` from the SafeB9SInstaller `.zip` to the root of your SD card
|
||||
1. Copy `usm.bin` from `unSAFE_MODE.zip` to the root of your SD card
|
||||
![]({{ "/images/screenshots/bb3/usm-root-layout.png" | absolute_url }}){: .notice--info}
|
||||
![]({{ "/images/screenshots/boot9strap-folder.png" | absolute_url }}){: .notice--info}
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `unSAFE_MODE.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
1. Copy `usm.bin` to the root of your SD card
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
|
|
@ -66,9 +49,9 @@ In this section, you will trigger the BannerBomb3 exploit using the DSiWare Mana
|
|||
1. Käynnistä konsolisi
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-usm-menu)
|
||||
1. Press (A) to select "Inject haxx"
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-usm)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Install unSAFE_MODE"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - unSAFE_MODE
|
||||
|
|
@ -77,7 +60,7 @@ In this section, you will enter Safe Mode (a feature available on all 3DS family
|
|||
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of BannerBomb3](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
1. Press "OK" to accept the update
|
||||
+ There is no update. This is part of the exploit
|
||||
1. Press "I accept" to accept the terms and conditions
|
||||
|
|
@ -107,8 +90,7 @@ In this section, you will trigger the BannerBomb3 exploit a second time so that
|
|||
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Restore slots"
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Uninstall unSAFE_MODE"
|
||||
+ Your device will automatically reboot
|
||||
1. Sammuta konsolisi
|
||||
1. Aseta SD-korttisi tietokoneeseesi
|
||||
|
|
|
|||
|
|
@ -56,6 +56,7 @@ In this section, you will use the Bruteforce Movable website to retrieve your de
|
|||
+ If you are still waiting after half an hour, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask (in English) for someone there to assist you
|
||||
1. When the process is completed, download your `movable.sed` file from the site
|
||||
+ Keep this file as you will need it in the upcoming pages
|
||||
1. Sammuta konsolisi
|
||||
|
||||
___
|
||||
|
||||
|
|
@ -63,11 +64,11 @@ ___
|
|||
|
||||
Once you have your device's encryption key (`movable.sed`), you will use it in conjunction with other exploits to install custom firmware on your 3DS.
|
||||
|
||||
#### unSAFE_MODE (Recommended)
|
||||
#### BannerBomb3
|
||||
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the SAFE_MODE firmware present in all 3DS units.
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the System Settings application.
|
||||
|
||||
Continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
Continue to [BannerBomb3](bannerbomb3)
|
||||
{: .notice--primary}
|
||||
|
||||
___
|
||||
|
|
|
|||
|
|
@ -126,11 +126,11 @@ If this is unsuccessful, try using another SD card.
|
|||
|
||||
## Installing boot9strap (USM)
|
||||
|
||||
### DSiWare Management menu crashes without showing USM menu
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (USM)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php).
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `usm.bin` is on the root of the SD card. If it is missing, then download the latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/latest) (the RELEASE `.zip` file), and copy the `usm.bin` file to the root of your SD card.
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, you will need to follow [an alternate branch of Seedminer](homebrew-launcher-(pichaxx)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
|
|
@ -144,16 +144,24 @@ If neither of these solutions fixes this problem, then custom firmware may have
|
|||
|
||||
### DSiWare Management shows a question mark
|
||||
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php), ensuring that you use the `movable.sed` file for your console.
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen), ensuring that you use the `movable.sed` file for your console.
|
||||
|
||||
### DSiWare Management menu crashes without purple screen
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
|
||||
---
|
||||
|
||||
## Installing boot9strap (Fredtool)
|
||||
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (Fredtool)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
### Error on Fredtool Injector page
|
||||
|
||||
Ensure that your `movable.sed` and DSiWare backup come from the same console. A mismatch will result in an error.
|
||||
|
|
|
|||
|
|
@ -6,8 +6,8 @@ title: "BannerBomb3"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>To dump system DSiWare, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system in order to dump the DSi Internet Settings application to the SD root.</p>
|
||||
<p>To launch custom code, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system.</p>
|
||||
<p>For a more technical explanation, see <a href="https://github.com/zoogie/Bannerbomb3">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
|
@ -27,38 +27,43 @@ If you have a Taiwanese console (indicated by a T after the system version), fol
|
|||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 exploit onto your device's SD card.
|
||||
|
||||
1. Ouvrez [BannerBomb3 Tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php) sur votre ordinateur
|
||||
1. Téléchargez votre movable.sed en utilisant l'option "Choisir le fichier"
|
||||
1. Sélectionnez "Build and Download"
|
||||
+ Ceci téléchargera un exploit DSiWare nommé `F00D43D5.bin` dans un fichier zip (`BannerBomb3.zip`)
|
||||
1. Si votre console est allumée, éteignez-la
|
||||
1. Éteignez votre 3DS
|
||||
1. Insérez votre carte SD dans votre ordinateur
|
||||
1. Open [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen) on your computer
|
||||
1. Upload your movable.sed using the “Choose File” option
|
||||
1. Click “Build and Download”
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a payload called `bb3.bin` inside of a zip archive (`DSIWARE_EXPLOIT.zip`)
|
||||
1. Copy `bb3.bin` from `DSIWARE_EXPLOIT.zip` to the root of your SD card
|
||||
+ La racine de la carte SD représente le répertoire initial de la carte SD où vous pouvez voir le dossier Nintendo 3DS, mais ce n'est pas à l'intérieur de ce dernier
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `BannerBomb3.zip` to the `Nintendo DSiWare` folder
|
||||
1. Copy the `F00D43D5.bin` file from `DSIWARE_EXPLOIT.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
#### Section II - Hardware Button Check
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next page.
|
||||
In this section, you will test the SAFE_MODE function of your device. This will determine which method you will follow in the next page.
|
||||
|
||||
1. Réinsérez votre carte SD dans votre 3DS
|
||||
1. Allumez votre console
|
||||
1. Lancez les Paramètres de la console
|
||||
1. Navigate to `Data Management` -> `DSiWare` -> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Votre console devrait clignoter en magenta (rose/violet) et puis planter quelques secondes plus tard. Cela signifie que ça a fonctionné
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
1. If prompted to update, press Cancel
|
||||
+ If the device boots to the HOME Menu, just continue to the next step
|
||||
1. Éteignez votre 3DS
|
||||
1. Insérez votre carte SD dans votre ordinateur
|
||||
1. You should now have `42383841.bin` on the root of your SD card. Copy this file to somewhere on your computer, as you will use it on the next page
|
||||
1. Naviguez vers `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` sur votre carte SD
|
||||
1. Delete `F00D43D5.bin` from your Nintendo DSiWare folder and from your computer. Ce fichier ne sera plus nécessaire
|
||||
|
||||
___
|
||||
|
||||
Continuez vers [Installation de boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
### Next steps: Choose an exploit
|
||||
|
||||
If your device booted into Safe Mode and prompted to you to do a system update in Section II, Safe Mode is working on your device.
|
||||
|
||||
If your device booted into Safe Mode, continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
{: .notice--primary}
|
||||
|
||||
If your device did NOT boot into Safe Mode, continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
{: .notice--warning}
|
||||
|
|
|
|||
|
|
@ -6,14 +6,13 @@ title: "Installing boot9strap (Fredtool)"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application. This requires you to have a DSiWare backup, which you should have gotten in the previous section.</p>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application.</p>
|
||||
<p>This is a currently working implementation of the "FIRM partitions known-plaintext" exploit detailed <a href="https://www.3dbrew.org/wiki/3DS_System_Flaws">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
||||
## Ce dont vous avez besoin
|
||||
|
||||
* A DSiWare Backup, normally `42383841.bin` (You should have one on the root of your SD card from following [BannerBomb3](bannerbomb3))
|
||||
* Votre fichier `movable.sed` obtenu grâce à [Seedminer](seedminer)
|
||||
* The latest release of [Frogminer_save](https://github.com/zoogie/Frogminer/releases/latest) (`Frogminer_save.zip`)
|
||||
* The latest release of [b9sTool](https://github.com/zoogie/b9sTool/releases/latest) (`boot.nds`)
|
||||
|
|
@ -27,17 +26,32 @@ As an additional safety measure, we will perform an additional check for custom
|
|||
1. Maintenez le bouton (Select) enfoncé
|
||||
1. Allumez votre console tout en maintenant le bouton (Select) enfoncé
|
||||
1. If the check was successful, you will boot to the HOME Menu and you may proceed with this guide
|
||||
1. Éteignez votre 3DS
|
||||
|
||||
If you see a configuration menu, you already have CFW, and continuing with these instructions may BRICK your device! Suivez [Vérifier les CFW](checking-for-cfw) pour mettre à jour votre CFW existant.
|
||||
If you see a configuration menu or the console immediately powers off, you already have CFW, and continuing with these instructions may BRICK your device! Suivez [Vérifier les CFW](checking-for-cfw) pour mettre à jour votre CFW existant.
|
||||
{: .notice--danger}
|
||||
|
||||
#### Section II - Préparatifs
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next section.
|
||||
|
||||
1. Réinsérez votre carte SD dans votre 3DS
|
||||
1. Allumez votre console
|
||||
1. Lancez les Paramètres de la console
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-fredtool)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Dump DSiWare"
|
||||
+ Votre console s'éteindra automatiquement
|
||||
|
||||
#### Section III - Prep Work
|
||||
|
||||
In this section, you will copy the files necessary to temporarily replace DS Connection Settings with Flipnote Studio, which is used to launch the boot9strap (custom firmware) installer.
|
||||
|
||||
1. Insérez votre carte SD dans votre ordinateur
|
||||
1. Open the [DSIHaxInjector_new](https://jenkins.nelthorya.net/job/DSIHaxInjector_new/build?delay=0sec) website on your computer
|
||||
1. Under the "Username" field, enter any alphanumeric name (no spaces or special characters)
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file using the first "Browse..." option
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file from the root of your SD card using the first "Browse..." option
|
||||
1. Under the "MovableSed" field, upload your `movable.sed` file using the second "Browse..." option
|
||||
1. Under the "InjectionTarget" field, set the injection target to `DSinternet` (NOT memorypit)
|
||||
1. Click "Build"
|
||||
|
|
@ -46,7 +60,6 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
1. Click on the first search result
|
||||
+ This result should have the latest timestamp
|
||||
1. Click the "output_(name).zip" link
|
||||
1. Insérez votre carte SD dans votre ordinateur
|
||||
1. Naviguez vers `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` sur votre carte SD
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
|
|
@ -60,7 +73,7 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
![]({{ "/images/screenshots/fredtool-root-layout.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section III - Overwriting DS Connection Settings
|
||||
#### Section IV - Overwriting DS Connection Settings
|
||||
|
||||
In this section, you will copy the hacked DS Connection Settings DSiWare to internal memory, which will temporarily replace it with Flipnote Studio.
|
||||
|
||||
|
|
@ -73,7 +86,7 @@ In this section, you will copy the hacked DS Connection Settings DSiWare to inte
|
|||
1. Navigate to `Internet Settings` -> `Nintendo DS Connections`, then select "OK" ([image](/images/screenshots/fredtool/dsconnection.png))
|
||||
1. Si l'exploit a réussi, votre console devrait avoir démarré la version japonaise de Flipnote Studio
|
||||
|
||||
#### Section IV - Exploit Flipnote
|
||||
#### Section V - Flipnote Exploit
|
||||
|
||||
Si vous préférez un guide visuel pour cette section, un tel guide est disponible [ici](https://zoogie.github.io/web/flipnote_directions/).
|
||||
{: .notice--info}
|
||||
|
|
@ -99,7 +112,7 @@ In this section, you will perform a series of very specific steps within Flipnot
|
|||
+ If your device shuts down when you try to power it on, ensure that you have copied `boot.firm` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ If you see the Luma Configuration screen, press (Start) to reboot, then continue with the guide
|
||||
|
||||
#### Section V - Luma3DS Verification
|
||||
#### Section VI - Luma3DS Verification
|
||||
|
||||
Due to the nature of the exploit used, it is occasionally (but rarely) possible for boot9strap to not actually get installed. This section will therefore verify that boot9strap was successfully installed by seeing if some files that are normally automatically generated by Luma3DS were created.
|
||||
|
||||
|
|
@ -113,9 +126,9 @@ At this point, your console will boot to Luma3DS by default.
|
|||
+ Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
|
||||
+ On the next page, you will install useful homebrew applications to complete your setup.
|
||||
|
||||
#### Section VI - Restauration des paramètres de Connexions Nintendo DS
|
||||
#### Section VII - Restoring DS Connection Settings
|
||||
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section III.
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section IV.
|
||||
|
||||
1. Naviguez vers `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` sur votre carte SD
|
||||
1. Copy the `42383841.bin` file from the `clean` folder of the downloaded DSiWare archive (output_(name).zip) to the `Nintendo DSiWare` folder, replacing the existing one
|
||||
|
|
|
|||
|
|
@ -18,45 +18,28 @@ title: "Installation de boot9strap (USM)"
|
|||
|
||||
Ces instructions fonctionnent dans les régions USA, Europe, Japon et Corée indiquées par les lettres U, E, J ou K après le numéro de version de la console.
|
||||
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
{: .notice--warning}
|
||||
|
||||
## Ce dont vous avez besoin
|
||||
|
||||
* Votre fichier `movable.sed` obtenu grâce à [Seedminer](seedminer)
|
||||
* The latest release of [SafeB9SInstaller](https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip) (direct download)
|
||||
* The latest release of [boot9strap](https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip) (direct download)
|
||||
* The latest release of [Luma3DS](https://github.com/LumaTeam/Luma3DS/releases/latest) (the Luma3DS `.zip` file)
|
||||
* The latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/download/v1.3/usm.bin) (direct download)
|
||||
|
||||
|
||||
#### Section I - Préparatifs
|
||||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 and unSAFE_MODE exploits onto your device's SD card.
|
||||
In this section, you will copy the files needed to trigger the unSAFE_MODE exploit onto your device's SD card.
|
||||
|
||||
1. Si votre console est allumée, éteignez la
|
||||
1. Ouvrez [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php) sur votre ordinateur
|
||||
1. Téléchargez votre movable.sed en utilisant l'option "Choisir le fichier"
|
||||
1. Sélectionnez "Build and Download"
|
||||
+ Ceci va télécharger un DSiWare d'exploit appelé `F00D43D5.bin` et un fichier d'exploit SAFE_MODE appelé `usm.bin` dans une archive zip (`unSAFE_MODE.zip`)
|
||||
1. Insérez votre carte SD dans votre ordinateur
|
||||
1. Your SD card should be inserted in your computer
|
||||
1. Copiez `boot.firm` et `boot.3dsx` depuis Luma3DS `.zip`vers la racine de votre carte SD
|
||||
+ La racine de la carte SD représente le répertoire initial de la carte SD où vous pouvez voir le dossier Nintendo 3DS, mais ce n'est pas à l'intérieur de ce dernier
|
||||
1. Créez un dossier à la racine de votre carte SD nommé `boot9strap`
|
||||
1. Copiez `boot9strap.firm` et `boot9strap.firm.sha` depuis le fichier ".zip" de boot9strap vers le dossier `/boot9strap/` sur votre carte SD
|
||||
1. Copiez `SafeB9SInstaller.bin` depuis le fichier `.zip` de SafeB9SInstaller à la racine de votre carte SD
|
||||
1. Copiez `usm.bin` depuis l'archive `unSAFE_MODE.zip` vers la racine de votre carte SD
|
||||
![]({{ "/images/screenshots/bb3/usm-root-layout.png" | absolute_url }}){: .notice--info}
|
||||
![]({{ "/images/screenshots/boot9strap-folder.png" | absolute_url }}){: .notice--info}
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copiez le fichier `F00D43D5.bin` depuis `unSAFE_MODE.zip` vers le dossier `Nintendo DSiWare`
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
1. Copy `usm.bin` to the root of your SD card
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
|
|
@ -66,9 +49,9 @@ In this section, you will trigger the BannerBomb3 exploit using the DSiWare Mana
|
|||
1. Allumez votre console
|
||||
1. Lancez les Paramètres de la console
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-usm-menu)
|
||||
1. Press (A) to select "Inject haxx"
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-usm)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Install unSAFE_MODE"
|
||||
+ Votre console s'éteindra automatiquement
|
||||
|
||||
#### Section III - unSAFE_MODE
|
||||
|
|
@ -77,7 +60,7 @@ In this section, you will enter Safe Mode (a feature available on all 3DS family
|
|||
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of BannerBomb3](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
1. Appuyez sur "OK" pour accepter la mise à jour
|
||||
+ Aucune mise à jour nécessaire. Ceci fait partie de l'exploit
|
||||
1. Appuyez sur « J'accepte » pour accepter les termes et conditions
|
||||
|
|
@ -107,8 +90,7 @@ In this section, you will trigger the BannerBomb3 exploit a second time so that
|
|||
|
||||
1. Lancez les Paramètres de la console
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Restore slots"
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Uninstall unSAFE_MODE"
|
||||
+ Your device will automatically reboot
|
||||
1. Éteignez votre 3DS
|
||||
1. Insérez votre carte SD dans votre ordinateur
|
||||
|
|
|
|||
|
|
@ -56,6 +56,7 @@ In this section, you will use the Bruteforce Movable website to retrieve your de
|
|||
+ If you are still waiting after half an hour, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask (in English) for someone there to assist you
|
||||
1. When the process is completed, download your `movable.sed` file from the site
|
||||
+ Gardez ce fichier car vous en aurez besoin dans les pages à venir
|
||||
1. Éteignez votre 3DS
|
||||
|
||||
___
|
||||
|
||||
|
|
@ -63,11 +64,11 @@ ___
|
|||
|
||||
Une fois que vous avez la clé de chiffrement de votre console (`movable.sed`), vous l'utiliserez en conjonction avec d'autres exploits pour installer un custom firmware sur votre 3DS.
|
||||
|
||||
#### unSAFE_MODE (Recommended)
|
||||
#### BannerBomb3
|
||||
|
||||
Cette méthode d'utilisation de Seedminer pour une exploitation plus poussée utilise votre fichier `movable.sed` pour tirer parti d'exploits du firmware SAFE_MODE présent sur toutes les consoles 3DS.
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the System Settings application.
|
||||
|
||||
Continuer vers [Installation de boot9strap (USM)](installing-boot9strap-(usm))
|
||||
Continue to [BannerBomb3](bannerbomb3)
|
||||
{: .notice--primary}
|
||||
|
||||
___
|
||||
|
|
|
|||
|
|
@ -126,11 +126,11 @@ If this is unsuccessful, try using another SD card.
|
|||
|
||||
## Installing boot9strap (USM)
|
||||
|
||||
### DSiWare Management menu crashes without showing USM menu
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (USM)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php).
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `usm.bin` is on the root of the SD card. If it is missing, then download the latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/latest) (the RELEASE `.zip` file), and copy the `usm.bin` file to the root of your SD card.
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, you will need to follow [an alternate branch of Seedminer](homebrew-launcher-(pichaxx)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
|
|
@ -144,16 +144,24 @@ If neither of these solutions fixes this problem, then custom firmware may have
|
|||
|
||||
### DSiWare Management shows a question mark
|
||||
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php), ensuring that you use the `movable.sed` file for your console.
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen), ensuring that you use the `movable.sed` file for your console.
|
||||
|
||||
### DSiWare Management menu crashes without purple screen
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
|
||||
---
|
||||
|
||||
## Installing boot9strap (Fredtool)
|
||||
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (Fredtool)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
### Error on Fredtool Injector page
|
||||
|
||||
Ensure that your `movable.sed` and DSiWare backup come from the same console. A mismatch will result in an error.
|
||||
|
|
|
|||
|
|
@ -6,8 +6,8 @@ title: "BannerBomb3"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>To dump system DSiWare, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system in order to dump the DSi Internet Settings application to the SD root.</p>
|
||||
<p>To launch custom code, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system.</p>
|
||||
<p>For a more technical explanation, see <a href="https://github.com/zoogie/Bannerbomb3">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
|
@ -27,38 +27,43 @@ If you have a Taiwanese console (indicated by a T after the system version), fol
|
|||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 exploit onto your device's SD card.
|
||||
|
||||
1. Open [BannerBomb3 Tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php) on your computer
|
||||
1. Upload your movable.sed using the "Choose File" option
|
||||
1. Click "Build and Download"
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` inside of a zip file (`BannerBomb3.zip`)
|
||||
1. If your console is powered on, power off your console
|
||||
1. תכבו את המכשיר
|
||||
1. תכניסו את ה-SD שלכם למחשב
|
||||
1. Open [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen) on your computer
|
||||
1. Upload your movable.sed using the “Choose File” option
|
||||
1. Click “Build and Download”
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a payload called `bb3.bin` inside of a zip archive (`DSIWARE_EXPLOIT.zip`)
|
||||
1. Copy `bb3.bin` from `DSIWARE_EXPLOIT.zip` to the root of your SD card
|
||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `BannerBomb3.zip` to the `Nintendo DSiWare` folder
|
||||
1. Copy the `F00D43D5.bin` file from `DSIWARE_EXPLOIT.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
#### Section II - Hardware Button Check
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next page.
|
||||
In this section, you will test the SAFE_MODE function of your device. This will determine which method you will follow in the next page.
|
||||
|
||||
1. תכניסו מחדש את כרטיס הSD שלכם לתוך המכשיר שלכם
|
||||
1. תפעילו את המכשיר
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare` -> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your system should flash Magenta (pink/purple) and then crash a few seconds later. This means it worked
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
1. If prompted to update, press Cancel
|
||||
+ If the device boots to the HOME Menu, just continue to the next step
|
||||
1. תכבו את המכשיר
|
||||
1. תכניסו את ה-SD שלכם למחשב
|
||||
1. You should now have `42383841.bin` on the root of your SD card. Copy this file to somewhere on your computer, as you will use it on the next page
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
1. Delete `F00D43D5.bin` from your Nintendo DSiWare folder and from your computer. This file will not be needed anymore
|
||||
|
||||
___
|
||||
|
||||
Continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
### Next steps: Choose an exploit
|
||||
|
||||
If your device booted into Safe Mode and prompted to you to do a system update in Section II, Safe Mode is working on your device.
|
||||
|
||||
If your device booted into Safe Mode, continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
{: .notice--primary}
|
||||
|
||||
If your device did NOT boot into Safe Mode, continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
{: .notice--warning}
|
||||
|
|
|
|||
|
|
@ -6,14 +6,13 @@ title: "Installing boot9strap (Fredtool)"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application. This requires you to have a DSiWare backup, which you should have gotten in the previous section.</p>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application.</p>
|
||||
<p>This is a currently working implementation of the "FIRM partitions known-plaintext" exploit detailed <a href="https://www.3dbrew.org/wiki/3DS_System_Flaws">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
||||
### What You Need
|
||||
|
||||
* A DSiWare Backup, normally `42383841.bin` (You should have one on the root of your SD card from following [BannerBomb3](bannerbomb3))
|
||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||
* The latest release of [Frogminer_save](https://github.com/zoogie/Frogminer/releases/latest) (`Frogminer_save.zip`)
|
||||
* The latest release of [b9sTool](https://github.com/zoogie/b9sTool/releases/latest) (`boot.nds`)
|
||||
|
|
@ -27,17 +26,32 @@ As an additional safety measure, we will perform an additional check for custom
|
|||
1. Hold the (Select) button
|
||||
1. Power on your device while still holding the (Select) button
|
||||
1. If the check was successful, you will boot to the HOME Menu and you may proceed with this guide
|
||||
1. תכבו את המכשיר
|
||||
|
||||
If you see a configuration menu, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
If you see a configuration menu or the console immediately powers off, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
{: .notice--danger}
|
||||
|
||||
#### Section II - Prep Work
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next section.
|
||||
|
||||
1. תכניסו מחדש את כרטיס הSD שלכם לתוך המכשיר שלכם
|
||||
1. תפעילו את המכשיר
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-fredtool)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Dump DSiWare"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - Prep Work
|
||||
|
||||
In this section, you will copy the files necessary to temporarily replace DS Connection Settings with Flipnote Studio, which is used to launch the boot9strap (custom firmware) installer.
|
||||
|
||||
1. תכניסו את ה-SD שלכם למחשב
|
||||
1. Open the [DSIHaxInjector_new](https://jenkins.nelthorya.net/job/DSIHaxInjector_new/build?delay=0sec) website on your computer
|
||||
1. Under the "Username" field, enter any alphanumeric name (no spaces or special characters)
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file using the first "Browse..." option
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file from the root of your SD card using the first "Browse..." option
|
||||
1. Under the "MovableSed" field, upload your `movable.sed` file using the second "Browse..." option
|
||||
1. Under the "InjectionTarget" field, set the injection target to `DSinternet` (NOT memorypit)
|
||||
1. Click "Build"
|
||||
|
|
@ -46,7 +60,6 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
1. Click on the first search result
|
||||
+ This result should have the latest timestamp
|
||||
1. Click the "output_(name).zip" link
|
||||
1. תכניסו את ה-SD שלכם למחשב
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
|
|
@ -60,7 +73,7 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
![]({{ "/images/screenshots/fredtool-root-layout.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section III - Overwriting DS Connection Settings
|
||||
#### Section IV - Overwriting DS Connection Settings
|
||||
|
||||
In this section, you will copy the hacked DS Connection Settings DSiWare to internal memory, which will temporarily replace it with Flipnote Studio.
|
||||
|
||||
|
|
@ -73,7 +86,7 @@ In this section, you will copy the hacked DS Connection Settings DSiWare to inte
|
|||
1. Navigate to `Internet Settings` -> `Nintendo DS Connections`, then select "OK" ([image](/images/screenshots/fredtool/dsconnection.png))
|
||||
1. If the exploit was successful, your device will have loaded the JPN version of Flipnote Studio
|
||||
|
||||
#### Section IV - Flipnote Exploit
|
||||
#### Section V - Flipnote Exploit
|
||||
|
||||
If you would prefer a visual guide to this section, one is available [here](https://zoogie.github.io/web/flipnote_directions/).
|
||||
{: .notice--info}
|
||||
|
|
@ -99,7 +112,7 @@ In this section, you will perform a series of very specific steps within Flipnot
|
|||
+ If your device shuts down when you try to power it on, ensure that you have copied `boot.firm` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ If you see the Luma Configuration screen, press (Start) to reboot, then continue with the guide
|
||||
|
||||
#### Section V - Luma3DS Verification
|
||||
#### Section VI - Luma3DS Verification
|
||||
|
||||
Due to the nature of the exploit used, it is occasionally (but rarely) possible for boot9strap to not actually get installed. This section will therefore verify that boot9strap was successfully installed by seeing if some files that are normally automatically generated by Luma3DS were created.
|
||||
|
||||
|
|
@ -113,9 +126,9 @@ At this point, your console will boot to Luma3DS by default.
|
|||
+ Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
|
||||
+ On the next page, you will install useful homebrew applications to complete your setup.
|
||||
|
||||
#### Section VI - Restoring DS Connection Settings
|
||||
#### Section VII - Restoring DS Connection Settings
|
||||
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section III.
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section IV.
|
||||
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
1. Copy the `42383841.bin` file from the `clean` folder of the downloaded DSiWare archive (output_(name).zip) to the `Nintendo DSiWare` folder, replacing the existing one
|
||||
|
|
|
|||
|
|
@ -18,45 +18,28 @@ title: "Installing boot9strap (USM)"
|
|||
|
||||
These instructions work on USA, Europe, Japan, and Korea region consoles as indicated by the letters U, E, J, or K after the system version.
|
||||
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
{: .notice--warning}
|
||||
|
||||
### What You Need
|
||||
|
||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||
* The latest release of [SafeB9SInstaller](https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip) (direct download)
|
||||
* The latest release of [boot9strap](https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip) (direct download)
|
||||
* The latest release of [Luma3DS](https://github.com/LumaTeam/Luma3DS/releases/latest) (the Luma3DS `.zip` file)
|
||||
* The latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/download/v1.3/usm.bin) (direct download)
|
||||
|
||||
|
||||
#### חלק I - הכנות
|
||||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 and unSAFE_MODE exploits onto your device's SD card.
|
||||
In this section, you will copy the files needed to trigger the unSAFE_MODE exploit onto your device's SD card.
|
||||
|
||||
1. If your device is powered on, power off your device
|
||||
1. Open [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php) on your computer
|
||||
1. Upload your movable.sed using the "Choose File" option
|
||||
1. Click "Build and Download"
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a SAFE_MODE exploit data file called `usm.bin` inside of a zip archive (`unSAFE_MODE.zip`)
|
||||
1. תכניסו את ה-SD שלכם למחשב
|
||||
1. Your SD card should be inserted in your computer
|
||||
1. Copy `boot.firm` and `boot.3dsx` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||
1. תצרו ב-SD שלכם תיקייה חדשה בשם `boot9strap`
|
||||
1. תעתיקו את`boot9strap.firm` ואת `boot9strap.firm.sha` מה `.zip` של boot9strap אל תיקיית `/boot9strap/`על כרטיס הSD שלכם
|
||||
1. Copy `SafeB9SInstaller.bin` from the SafeB9SInstaller `.zip` to the root of your SD card
|
||||
1. Copy `usm.bin` from `unSAFE_MODE.zip` to the root of your SD card
|
||||
![]({{ "/images/screenshots/bb3/usm-root-layout.png" | absolute_url }}){: .notice--info}
|
||||
![]({{ "/images/screenshots/boot9strap-folder.png" | absolute_url }}){: .notice--info}
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `unSAFE_MODE.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
1. Copy `usm.bin` to the root of your SD card
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
|
|
@ -66,9 +49,9 @@ In this section, you will trigger the BannerBomb3 exploit using the DSiWare Mana
|
|||
1. תפעילו את המכשיר
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-usm-menu)
|
||||
1. Press (A) to select "Inject haxx"
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-usm)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Install unSAFE_MODE"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - unSAFE_MODE
|
||||
|
|
@ -77,7 +60,7 @@ In this section, you will enter Safe Mode (a feature available on all 3DS family
|
|||
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of BannerBomb3](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
1. Press "OK" to accept the update
|
||||
+ There is no update. This is part of the exploit
|
||||
1. Press "I accept" to accept the terms and conditions
|
||||
|
|
@ -107,8 +90,7 @@ In this section, you will trigger the BannerBomb3 exploit a second time so that
|
|||
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Restore slots"
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Uninstall unSAFE_MODE"
|
||||
+ Your device will automatically reboot
|
||||
1. תכבו את המכשיר
|
||||
1. תכניסו את ה-SD שלכם למחשב
|
||||
|
|
|
|||
|
|
@ -56,6 +56,7 @@ In this section, you will use the Bruteforce Movable website to retrieve your de
|
|||
+ If you are still waiting after half an hour, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask (in English) for someone there to assist you
|
||||
1. When the process is completed, download your `movable.sed` file from the site
|
||||
+ Keep this file as you will need it in the upcoming pages
|
||||
1. תכבו את המכשיר
|
||||
|
||||
___
|
||||
|
||||
|
|
@ -63,11 +64,11 @@ ___
|
|||
|
||||
Once you have your device's encryption key (`movable.sed`), you will use it in conjunction with other exploits to install custom firmware on your 3DS.
|
||||
|
||||
#### unSAFE_MODE (Recommended)
|
||||
#### BannerBomb3
|
||||
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the SAFE_MODE firmware present in all 3DS units.
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the System Settings application.
|
||||
|
||||
Continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
Continue to [BannerBomb3](bannerbomb3)
|
||||
{: .notice--primary}
|
||||
|
||||
___
|
||||
|
|
|
|||
|
|
@ -126,11 +126,11 @@ If this is unsuccessful, try using another SD card.
|
|||
|
||||
## Installing boot9strap (USM)
|
||||
|
||||
### DSiWare Management menu crashes without showing USM menu
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (USM)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php).
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `usm.bin` is on the root of the SD card. If it is missing, then download the latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/latest) (the RELEASE `.zip` file), and copy the `usm.bin` file to the root of your SD card.
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, you will need to follow [an alternate branch of Seedminer](homebrew-launcher-(pichaxx)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
|
|
@ -144,16 +144,24 @@ If neither of these solutions fixes this problem, then custom firmware may have
|
|||
|
||||
### DSiWare Management shows a question mark
|
||||
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php), ensuring that you use the `movable.sed` file for your console.
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen), ensuring that you use the `movable.sed` file for your console.
|
||||
|
||||
### DSiWare Management menu crashes without purple screen
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
|
||||
---
|
||||
|
||||
## Installing boot9strap (Fredtool)
|
||||
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (Fredtool)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
### Error on Fredtool Injector page
|
||||
|
||||
Ensure that your `movable.sed` and DSiWare backup come from the same console. A mismatch will result in an error.
|
||||
|
|
|
|||
|
|
@ -6,8 +6,8 @@ title: "BannerBomb3"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>To dump system DSiWare, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system in order to dump the DSi Internet Settings application to the SD root.</p>
|
||||
<p>To launch custom code, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system.</p>
|
||||
<p>For a more technical explanation, see <a href="https://github.com/zoogie/Bannerbomb3">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
|
@ -27,38 +27,43 @@ If you have a Taiwanese console (indicated by a T after the system version), fol
|
|||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 exploit onto your device's SD card.
|
||||
|
||||
1. Open [BannerBomb3 Tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php) on your computer
|
||||
1. Upload your movable.sed using the "Choose File" option
|
||||
1. Click "Build and Download"
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` inside of a zip file (`BannerBomb3.zip`)
|
||||
1. If your console is powered on, power off your console
|
||||
1. Power off your device
|
||||
1. Insert your SD card into your computer
|
||||
1. Open [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen) on your computer
|
||||
1. Upload your movable.sed using the “Choose File” option
|
||||
1. Click “Build and Download”
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a payload called `bb3.bin` inside of a zip archive (`DSIWARE_EXPLOIT.zip`)
|
||||
1. Copy `bb3.bin` from `DSIWARE_EXPLOIT.zip` to the root of your SD card
|
||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `BannerBomb3.zip` to the `Nintendo DSiWare` folder
|
||||
1. Copy the `F00D43D5.bin` file from `DSIWARE_EXPLOIT.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
#### Section II - Hardware Button Check
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next page.
|
||||
In this section, you will test the SAFE_MODE function of your device. This will determine which method you will follow in the next page.
|
||||
|
||||
1. Reinsert your SD card into your device
|
||||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare` -> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your system should flash Magenta (pink/purple) and then crash a few seconds later. This means it worked
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
1. If prompted to update, press Cancel
|
||||
+ If the device boots to the HOME Menu, just continue to the next step
|
||||
1. Power off your device
|
||||
1. Insert your SD card into your computer
|
||||
1. You should now have `42383841.bin` on the root of your SD card. Copy this file to somewhere on your computer, as you will use it on the next page
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
1. Delete `F00D43D5.bin` from your Nintendo DSiWare folder and from your computer. This file will not be needed anymore
|
||||
|
||||
___
|
||||
|
||||
Continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
### Next steps: Choose an exploit
|
||||
|
||||
If your device booted into Safe Mode and prompted to you to do a system update in Section II, Safe Mode is working on your device.
|
||||
|
||||
If your device booted into Safe Mode, continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
{: .notice--primary}
|
||||
|
||||
If your device did NOT boot into Safe Mode, continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
{: .notice--warning}
|
||||
|
|
|
|||
|
|
@ -6,14 +6,13 @@ title: "Installing boot9strap (Fredtool)"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application. This requires you to have a DSiWare backup, which you should have gotten in the previous section.</p>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application.</p>
|
||||
<p>This is a currently working implementation of the "FIRM partitions known-plaintext" exploit detailed <a href="https://www.3dbrew.org/wiki/3DS_System_Flaws">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
||||
### What You Need
|
||||
|
||||
* A DSiWare Backup, normally `42383841.bin` (You should have one on the root of your SD card from following [BannerBomb3](bannerbomb3))
|
||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||
* The latest release of [Frogminer_save](https://github.com/zoogie/Frogminer/releases/latest) (`Frogminer_save.zip`)
|
||||
* The latest release of [b9sTool](https://github.com/zoogie/b9sTool/releases/latest) (`boot.nds`)
|
||||
|
|
@ -27,17 +26,32 @@ As an additional safety measure, we will perform an additional check for custom
|
|||
1. Hold the (Select) button
|
||||
1. Power on your device while still holding the (Select) button
|
||||
1. If the check was successful, you will boot to the HOME Menu and you may proceed with this guide
|
||||
1. Power off your device
|
||||
|
||||
If you see a configuration menu, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
If you see a configuration menu or the console immediately powers off, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
{: .notice--danger}
|
||||
|
||||
#### Section II - Prep Work
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next section.
|
||||
|
||||
1. Reinsert your SD card into your device
|
||||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-fredtool)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Dump DSiWare"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - Prep Work
|
||||
|
||||
In this section, you will copy the files necessary to temporarily replace DS Connection Settings with Flipnote Studio, which is used to launch the boot9strap (custom firmware) installer.
|
||||
|
||||
1. Insert your SD card into your computer
|
||||
1. Open the [DSIHaxInjector_new](https://jenkins.nelthorya.net/job/DSIHaxInjector_new/build?delay=0sec) website on your computer
|
||||
1. Under the "Username" field, enter any alphanumeric name (no spaces or special characters)
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file using the first "Browse..." option
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file from the root of your SD card using the first "Browse..." option
|
||||
1. Under the "MovableSed" field, upload your `movable.sed` file using the second "Browse..." option
|
||||
1. Under the "InjectionTarget" field, set the injection target to `DSinternet` (NOT memorypit)
|
||||
1. Click "Build"
|
||||
|
|
@ -46,7 +60,6 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
1. Click on the first search result
|
||||
+ This result should have the latest timestamp
|
||||
1. Click the "output_(name).zip" link
|
||||
1. Insert your SD card into your computer
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
|
|
@ -60,7 +73,7 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
![]({{ "/images/screenshots/fredtool-root-layout.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section III - Overwriting DS Connection Settings
|
||||
#### Section IV - Overwriting DS Connection Settings
|
||||
|
||||
In this section, you will copy the hacked DS Connection Settings DSiWare to internal memory, which will temporarily replace it with Flipnote Studio.
|
||||
|
||||
|
|
@ -73,7 +86,7 @@ In this section, you will copy the hacked DS Connection Settings DSiWare to inte
|
|||
1. Navigate to `Internet Settings` -> `Nintendo DS Connections`, then select "OK" ([image](/images/screenshots/fredtool/dsconnection.png))
|
||||
1. If the exploit was successful, your device will have loaded the JPN version of Flipnote Studio
|
||||
|
||||
#### Section IV - Flipnote Exploit
|
||||
#### Section V - Flipnote Exploit
|
||||
|
||||
If you would prefer a visual guide to this section, one is available [here](https://zoogie.github.io/web/flipnote_directions/).
|
||||
{: .notice--info}
|
||||
|
|
@ -99,7 +112,7 @@ In this section, you will perform a series of very specific steps within Flipnot
|
|||
+ If your device shuts down when you try to power it on, ensure that you have copied `boot.firm` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ If you see the Luma Configuration screen, press (Start) to reboot, then continue with the guide
|
||||
|
||||
#### Section V - Luma3DS Verification
|
||||
#### Section VI - Luma3DS Verification
|
||||
|
||||
Due to the nature of the exploit used, it is occasionally (but rarely) possible for boot9strap to not actually get installed. This section will therefore verify that boot9strap was successfully installed by seeing if some files that are normally automatically generated by Luma3DS were created.
|
||||
|
||||
|
|
@ -113,9 +126,9 @@ At this point, your console will boot to Luma3DS by default.
|
|||
+ Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
|
||||
+ On the next page, you will install useful homebrew applications to complete your setup.
|
||||
|
||||
#### Section VI - Restoring DS Connection Settings
|
||||
#### Section VII - Restoring DS Connection Settings
|
||||
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section III.
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section IV.
|
||||
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
1. Copy the `42383841.bin` file from the `clean` folder of the downloaded DSiWare archive (output_(name).zip) to the `Nintendo DSiWare` folder, replacing the existing one
|
||||
|
|
|
|||
|
|
@ -18,45 +18,28 @@ title: "Installing boot9strap (USM)"
|
|||
|
||||
These instructions work on USA, Europe, Japan, and Korea region consoles as indicated by the letters U, E, J, or K after the system version.
|
||||
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
{: .notice--warning}
|
||||
|
||||
### What You Need
|
||||
|
||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||
* The latest release of [SafeB9SInstaller](https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip) (direct download)
|
||||
* The latest release of [boot9strap](https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip) (direct download)
|
||||
* The latest release of [Luma3DS](https://github.com/LumaTeam/Luma3DS/releases/latest) (the Luma3DS `.zip` file)
|
||||
* The latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/download/v1.3/usm.bin) (direct download)
|
||||
|
||||
|
||||
#### Section I - Prep Work
|
||||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 and unSAFE_MODE exploits onto your device's SD card.
|
||||
In this section, you will copy the files needed to trigger the unSAFE_MODE exploit onto your device's SD card.
|
||||
|
||||
1. If your device is powered on, power off your device
|
||||
1. Open [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php) on your computer
|
||||
1. Upload your movable.sed using the "Choose File" option
|
||||
1. Click "Build and Download"
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a SAFE_MODE exploit data file called `usm.bin` inside of a zip archive (`unSAFE_MODE.zip`)
|
||||
1. Insert your SD card into your computer
|
||||
1. Your SD card should be inserted in your computer
|
||||
1. Copy `boot.firm` and `boot.3dsx` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||
1. Create a folder named `boot9strap` on the root of your SD card
|
||||
1. Copy `boot9strap.firm` and `boot9strap.firm.sha` from the boot9strap `.zip` to the `/boot9strap/` folder on your SD card
|
||||
1. Copy `SafeB9SInstaller.bin` from the SafeB9SInstaller `.zip` to the root of your SD card
|
||||
1. Copy `usm.bin` from `unSAFE_MODE.zip` to the root of your SD card
|
||||
![]({{ "/images/screenshots/bb3/usm-root-layout.png" | absolute_url }}){: .notice--info}
|
||||
![]({{ "/images/screenshots/boot9strap-folder.png" | absolute_url }}){: .notice--info}
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `unSAFE_MODE.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
1. Copy `usm.bin` to the root of your SD card
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
|
|
@ -66,9 +49,9 @@ In this section, you will trigger the BannerBomb3 exploit using the DSiWare Mana
|
|||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-usm-menu)
|
||||
1. Press (A) to select "Inject haxx"
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-usm)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Install unSAFE_MODE"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - unSAFE_MODE
|
||||
|
|
@ -77,7 +60,7 @@ In this section, you will enter Safe Mode (a feature available on all 3DS family
|
|||
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of BannerBomb3](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
1. Press "OK" to accept the update
|
||||
+ There is no update. This is part of the exploit
|
||||
1. Press "I accept" to accept the terms and conditions
|
||||
|
|
@ -107,8 +90,7 @@ In this section, you will trigger the BannerBomb3 exploit a second time so that
|
|||
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Restore slots"
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Uninstall unSAFE_MODE"
|
||||
+ Your device will automatically reboot
|
||||
1. Power off your device
|
||||
1. Insert your SD card into your computer
|
||||
|
|
|
|||
|
|
@ -56,6 +56,7 @@ In this section, you will use the Bruteforce Movable website to retrieve your de
|
|||
+ If you are still waiting after half an hour, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask (in English) for someone there to assist you
|
||||
1. When the process is completed, download your `movable.sed` file from the site
|
||||
+ Keep this file as you will need it in the upcoming pages
|
||||
1. Power off your device
|
||||
|
||||
___
|
||||
|
||||
|
|
@ -63,11 +64,11 @@ ___
|
|||
|
||||
Once you have your device's encryption key (`movable.sed`), you will use it in conjunction with other exploits to install custom firmware on your 3DS.
|
||||
|
||||
#### unSAFE_MODE (Recommended)
|
||||
#### BannerBomb3
|
||||
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the SAFE_MODE firmware present in all 3DS units.
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the System Settings application.
|
||||
|
||||
Continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
Continue to [BannerBomb3](bannerbomb3)
|
||||
{: .notice--primary}
|
||||
|
||||
___
|
||||
|
|
|
|||
|
|
@ -126,11 +126,11 @@ If this is unsuccessful, try using another SD card.
|
|||
|
||||
## Installing boot9strap (USM)
|
||||
|
||||
### DSiWare Management menu crashes without showing USM menu
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (USM)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php).
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `usm.bin` is on the root of the SD card. If it is missing, then download the latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/latest) (the RELEASE `.zip` file), and copy the `usm.bin` file to the root of your SD card.
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, you will need to follow [an alternate branch of Seedminer](homebrew-launcher-(pichaxx)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
|
|
@ -144,16 +144,24 @@ If neither of these solutions fixes this problem, then custom firmware may have
|
|||
|
||||
### DSiWare Management shows a question mark
|
||||
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php), ensuring that you use the `movable.sed` file for your console.
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen), ensuring that you use the `movable.sed` file for your console.
|
||||
|
||||
### DSiWare Management menu crashes without purple screen
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
|
||||
---
|
||||
|
||||
## Installing boot9strap (Fredtool)
|
||||
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (Fredtool)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
### Error on Fredtool Injector page
|
||||
|
||||
Ensure that your `movable.sed` and DSiWare backup come from the same console. A mismatch will result in an error.
|
||||
|
|
|
|||
|
|
@ -6,8 +6,8 @@ title: "BannerBomb3"
|
|||
|
||||
<details>
|
||||
<summary><em>Technikai részletek (opcionális)</em></summary>
|
||||
<p>Ahhoz, hogy a rendszerből kinyerjük a DSiWare adatokat, egy hibát használunk ki a DSiWare adat kezelési ablakában, a rendszer beállításokban.</p>
|
||||
<p>Hogy ezt elérjük, szükségünk van a rendszer titkosítási kulcsára (movable.sed), hogy újra építsünk egy DSiWare mentést, aminek segítségével ki tudjuk nyerni a DSi Internet beállítások alkalmazást az SD kártyára.</p>
|
||||
<p>To launch custom code, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system.</p>
|
||||
<p>További technikai információkért látogass el <a href="https://github.com/zoogie/Bannerbomb3">ide</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
|
@ -27,38 +27,43 @@ Ha tajvani konzolod van (amit T betű jelez a rendszer verzió mögött), akkor
|
|||
|
||||
Ebben a fejezetben fel fogod másolni azokat a fájlokat az eszközöd SD kártyájára, amik ahhoz szükségesek, hogy kiváltsák a BannerBomb3 exploit-ot.
|
||||
|
||||
1. Nyisd meg a [BannerBomb3 Tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php) oldalt a számítógépeden
|
||||
1. Töltsd fel a `movable.sed` fájlod a "Choose File" opcióval
|
||||
1. Kattints a "Build and Download"-ra
|
||||
+ Ez le fog tölteni egy speciális DSiWare fájlt `F00D43D5.bin` néven, egy zip fájlban (`BannerBomb3.zip`)
|
||||
1. Ha a konzolod be van kapcsolva, most kapcsold ki
|
||||
1. Kapcsold ki a készüléked
|
||||
1. Helyezd az SD kártyád a számítógépbe
|
||||
1. Open [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen) on your computer
|
||||
1. Upload your movable.sed using the “Choose File” option
|
||||
1. Click “Build and Download”
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a payload called `bb3.bin` inside of a zip archive (`DSIWARE_EXPLOIT.zip`)
|
||||
1. Copy `bb3.bin` from `DSIWARE_EXPLOIT.zip` to the root of your SD card
|
||||
+ Az SD kártya gyökere a kezdőkönyvtárt jelenti az SD kártyán, ahol látható a Nintendo 3DS könyvtár, de nem vagyunk benne
|
||||
1. Navigálj a `Nintendo 3DS` -> `<ID0>` -> `<ID1>` mappába az SD kártyádon
|
||||
+ Az `<ID0>` egy 32 karakter hosszú mappanév, amit a [Seedminer](seedminer)-nél másoltál
|
||||
+ Az `<ID1>` egy 32 karakter hosszú nevű mappa az `<ID0>` mappában
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Hozz létre egy `Nintendo DSiWare` nevű mappát az `<ID1>` mappában
|
||||
+ Ha már van mappád *és* van benne DSiWare mentés fájl (`<8-character-id>.bin`), másold őket a számítógépedre és töröld őket az SD kártyáról
|
||||
1. Másold az `F00D43D5.bin` fájlt a `BannerBomb3.zip`-ből a `Nintendo DSiWare` mappába
|
||||
1. Copy the `F00D43D5.bin` file from `DSIWARE_EXPLOIT.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### II. rész - BannerBomb3
|
||||
#### Section II - Hardware Button Check
|
||||
|
||||
Ebben a fejezetben elő fogod idézni a BannerBomb3 exploit-ot a DSIWare Management menü használatával és lemásolni az eredmény dump fájlt a számítógépedre, hogy fel tudd használni a következő oldalon.
|
||||
In this section, you will test the SAFE_MODE function of your device. This will determine which method you will follow in the next page.
|
||||
|
||||
1. Helyezd vissza az SD kártyát a készülékedbe
|
||||
1. Kapcsold be a készüléked
|
||||
1. Lépj be a "System Settings"-be a készülékeden
|
||||
1. Navigálj ide: `Data Management` -> `DSiWare` -> `SD Card` ([kép](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ A rendszer most Magenta (rózsaszín/lila) színen fog világítani, és össze fog omlani. Ez azt jelenti, hogy működött
|
||||
1. Az eszközöd kikapcsolt állapotában tartsd nyomva a következő gombokat: (Bal Váll) + (Jobb Váll) + (D-Pad Fel) + (A), majd ezen gombok nyomva tartása mellett kapcsold be az eszközöd
|
||||
+ Tartsd nyomva a gombokat, amíg az eszköz be nem bootol a Safe Mode-ba (a "system update" menübe)
|
||||
1. If prompted to update, press Cancel
|
||||
+ If the device boots to the HOME Menu, just continue to the next step
|
||||
1. Kapcsold ki a készüléked
|
||||
1. Helyezd az SD kártyád a számítógépbe
|
||||
1. Most a `42383841.bin` fájlnak ott kell lennie az SD kártya gyökerében. Másold ezt valahova a számítógépeden, mert használni fogod a következő oldalon
|
||||
1. Navigálj a `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` mappába az SD kártyán
|
||||
1. Töröld ki a `F00D43D5.bin` fájlt a Nintendo DSiWare mappádból és a számítógépedről. Ez nem fog kelleni többet
|
||||
|
||||
___
|
||||
|
||||
Továbblépés a [Boot9strap telepítésére (Fredtool)](installing-boot9strap-(fredtool))
|
||||
### Következő lépések: Válassz egy exploit-ot
|
||||
|
||||
If your device booted into Safe Mode and prompted to you to do a system update in Section II, Safe Mode is working on your device.
|
||||
|
||||
If your device booted into Safe Mode, continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
{: .notice--primary}
|
||||
|
||||
If your device did NOT boot into Safe Mode, continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
{: .notice--warning}
|
||||
|
|
|
|||
|
|
@ -6,14 +6,13 @@ title: "Boot9strap telepítése (Fredtool)"
|
|||
|
||||
<details>
|
||||
<summary><em>Technikai részletek (opcionális)</em></summary>
|
||||
<p>Ez a metódusa a Seedminer használatának a további exploitoláshoz használja a <code>movable.sed</code> fájlod, hogy dekriptáljon egy DSiWare címet, azzal az céllal, hogy beinjektáljon egy exploitolható DSiWare címet a DS Internet Settings alkalmazásba. Ez igényli, hogy rendelkezzél egy DSiWare mentéssel, amit az előző fejezetben már meg kellett szerezzél.</p>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application.</p>
|
||||
<p>Ez egy jelenleg működő megvalósítása a "FIRM partitions known-plaintext" néven ismert exploitnak, amiről részletesebben olvashatsz <a href="https://www.3dbrew.org/wiki/3DS_System_Flaws">itt</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
||||
### Amire szükséged lesz
|
||||
|
||||
* Egy DSiWare mentésre, normális esetben ez a `42383841.bin` (Kell, hogy legyen egy az SD kártya gyökerében a [BannerBomb3](bannerbomb3) lépeseket követően)
|
||||
* A `movable.sed` fájlodra a [Seedminer](seedminer)-ből
|
||||
* A [Frogminer_save] legújabb kiadása (https://github.com/zoogie/Frogminer/releases/latest) (`Frogminer_save.zip`)
|
||||
* A [b9sTool] legújabb kiadása (https://github.com/zoogie/b9sTool/releases/latest) (`boot.nds`)
|
||||
|
|
@ -27,17 +26,32 @@ További biztonsági lépésként további ellenőrzést végzünk egyedi firmwa
|
|||
1. Nyomd le és tartsd nyomva (Select) gombot
|
||||
1. Kapcsold be az eszközöd, miközben nyomva tartod a (Select) gombot
|
||||
1. Ha az ellenőrzés sikeres volt, be fogsz bootolni a HOME Menübe és végrehajthatod ezt az útmutatót
|
||||
1. Kapcsold ki a készüléked
|
||||
|
||||
Ha a konfigurációs menüt látod, már van CFW-d és az útmutató folyatása BRICKELHETI az eszközödet! Kövesd a [CFW ellenőrzését](checking-for-cfw) a már meglévő CFW-d frissítéséhez.
|
||||
If you see a configuration menu or the console immediately powers off, you already have CFW, and continuing with these instructions may BRICK your device! Kövesd a [CFW ellenőrzését](checking-for-cfw) a már meglévő CFW-d frissítéséhez.
|
||||
{: .notice--danger}
|
||||
|
||||
#### II. rész - Előkészületek
|
||||
#### II. rész - BannerBomb3
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next section.
|
||||
|
||||
1. Tedd vissza az SD kártyád a készülékedbe
|
||||
1. Kapcsold be a készülékedet
|
||||
1. Lépj be a System Settings-be a készülékeden
|
||||
1. Navigálj ide: `Data Management` -> `DSiWare` -> `SD Card` ([kép](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-fredtool)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Dump DSiWare"
|
||||
+ Az eszközöd automatikusan ki fog kapcsolni
|
||||
|
||||
#### Section III - Prep Work
|
||||
|
||||
Ebben a fejezetben fel fogod másolni azokat a fájlokat, amik átmenetileg lecserélik a DS Connection Settings-t a Flipnote Studio-val, ami arra használt, hogy elindítsa a boot9strap (egyedi firmware) telepítőt.
|
||||
|
||||
1. Helyezd az SD kártyád a számítógépbe
|
||||
1. Nyisd meg a [DSIHaxInjector_new](https://jenkins.nelthorya.net/job/DSIHaxInjector_new/build?delay=0sec/) oldalt a számítógépeden
|
||||
1. A "Username" mező alatt adj meg egy tetszőleges alfanumerikus nevet (nem lehet benne szóköz vagy speciális karakter)
|
||||
1. A "DSiBin" mező alatt töltsd fel a `42383841.bin` fájlod az első "Browse..." opció használatával
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file from the root of your SD card using the first "Browse..." option
|
||||
1. A "MovableSed" mező alatt töltsd fel a `movable.sed` fájlod a második "Browse..." opció használatával
|
||||
1. Az "InjectionTarget" mező alatt válaszd ki az injection target-et `DSinternet`-re (NEM memorypit)
|
||||
1. Kattints a "Build"-re
|
||||
|
|
@ -46,7 +60,6 @@ Ebben a fejezetben fel fogod másolni azokat a fájlokat, amik átmenetileg lecs
|
|||
1. Kattints az első keresési találatra
|
||||
+ Ennek kell a legutolsó időbélyeggel rendelkeznie
|
||||
1. Kattints az "output_(name).zip" linkre
|
||||
1. Helyezd az SD kártyád a számítógépbe
|
||||
1. Navigálj a `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` mappába az SD kártyán
|
||||
+ Az `<ID0>` egy 32 karakter hosszú mappanév, amit a [Seedminer](seedminer)-nél másoltál
|
||||
+ Az `<ID1>` egy 32 karakter hosszú nevű mappa az `<ID0>` mappában
|
||||
|
|
@ -60,7 +73,7 @@ Ebben a fejezetben fel fogod másolni azokat a fájlokat, amik átmenetileg lecs
|
|||
![]({{ "/images/screenshots/fredtool-root-layout.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### III. rész - A DS Connection Settings felülírása
|
||||
#### Section IV - Overwriting DS Connection Settings
|
||||
|
||||
Ebben a fejezetben másolni fogod a hackelt DS Connection Settings DSiWare-t a belső memóriába, ami átmenetileg lecseréli azt a Flipnote Studio-val.
|
||||
|
||||
|
|
@ -73,7 +86,7 @@ Ebben a fejezetben másolni fogod a hackelt DS Connection Settings DSiWare-t a b
|
|||
1. Navigálj az `Internet Settings` -> `Nintendo DS Connections` opcióhoz, majd válaszd az "OK"-t ([kép](/images/screenshots/fredtool/dsconnection.png))
|
||||
1. Ha az exploit sikeres volt, a készülékednek ezt követően be kell töltenie a JPN verzióját a Flipnote Studio-nak
|
||||
|
||||
#### IV. rész - Flipnote Exploit
|
||||
#### V. rész - Flipnote Exploit
|
||||
|
||||
Ha inkább egy vizuális útmutatót szeretnél ehhez a fejezethez, [itt](https://zoogie.github.io/web/flipnote_directions/) elérhető egy.
|
||||
{: .notice--info}
|
||||
|
|
@ -99,7 +112,7 @@ Ebben a fejezetben végrehajtasz egy specifikus lépés sorozatot a Flipnote Stu
|
|||
+ Ha a készüléked kikapcsol amikor bekapcsolod, bizonyosodj meg róla, hogy átmásoltad-e a `boot.firm` fájlt a Luma3DS `.zip` fájlból az SD kártya gyökerébe
|
||||
+ Ha a Luma konfigurációs képernyőjét látod, nyomj (Start) gombot a reboot-hoz, majd folytasd az útmutatót
|
||||
|
||||
#### V. rész - Luma3DS ellenőrzés
|
||||
#### VI. rész - Luma3DS ellenőrzés
|
||||
|
||||
A használt exploit természete, hogy alkalmanként (de ritkán) lehetséges, hogy a boot9strap nem kerül telepítésre. Ez a fejezet ezért ellenőrzi, hogy a boot9strap sikeresen telepítésre került-e az által, hogy megvizsgálja, hogy néhány fájl, amit a Luma3DS létrehoz létrejött-e.
|
||||
|
||||
|
|
@ -113,9 +126,9 @@ Ezen a ponton a konzolod alapértelmezetten bebootol a Luma3DS-be.
|
|||
+ A Luma3DS nem néz ki másként, mint a normál HOME Menü. Ha a konzolod bebootolt a HOME Menübe, akkor egyedi firmware-t futtat.
|
||||
+ A következő oldalon hasznos homebrew alkalmaásokat telepítünk, hogy teljessé tegyük a telepítésedet.
|
||||
|
||||
#### VI. rész - A DS Connection Settings visszaállítása
|
||||
#### Section VII - Restoring DS Connection Settings
|
||||
|
||||
Ebben a fejezetben vissza fogod állítano a DS Connection Settings-et az az előtti állapotára, mielőtt lecserélésre került a Flipnote Studio-ra a III. részben.
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section IV.
|
||||
|
||||
1. Navigálj a `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` mappába az SD kártyán
|
||||
1. Másold a `42383841.bin` fájlt az `clean` mappájából a letöltött DSiWare csomagból (output_(name).zip) a `Nintendo DSiWare` mappába, felülírva az ott találhatót
|
||||
|
|
|
|||
|
|
@ -18,45 +18,28 @@ title: "Boot9strap telepítése (USM)"
|
|||
|
||||
Az utasítások az Amerikai, Európai, Japán és Koreai régiójú konzolokon működnek, amik a rendszer verzió mögött egy U, E, J vagy K betű jelöl.
|
||||
|
||||
Ha a (Jobb/Bal Váll), (D-Pad Fel) vagy (A) gombjaid nem működnek, [a Seedminer egy alternatív ágát](bannerbomb3) kell követned. Ha támogatásra van szükséged az anyaggal kapcsolatosan, csatlakozz a [Nintendo Homebrew-hoz Discord-on](https://discord.gg/MWxPgEp) és kérj, angolul, támogatást.
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](installing-boot9strap-(fredtool)). Ha támogatásra van szükséged az anyaggal kapcsolatosan, csatlakozz a [Nintendo Homebrew-hoz Discord-on](https://discord.gg/MWxPgEp) és kérj, angolul, támogatást.
|
||||
{: .notice--warning}
|
||||
|
||||
### Amire szükséged lesz
|
||||
|
||||
* A `movable.sed` fájlodra a [Seedminer](seedminer)-ből
|
||||
* A [SafeB9SInstaller](https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip) legfrisseb verziója (közvetlen letöltés)
|
||||
* A [boot9strap](https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip) legfrisseb verziója (közvetlen letöltés)
|
||||
* A [Luma3DS](https://github.com/LumaTeam/Luma3DS/releases/latest) legújabb kiadása (a Luma3DS `.zip` fájl)
|
||||
* The latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/download/v1.3/usm.bin) (direct download)
|
||||
|
||||
|
||||
#### I. rész - Előkészületek
|
||||
|
||||
Ebben a fejezetben fel fogod másolni azokat a fájlokat az eszközöd SD kártyájára, amik ahhoz szükségesek, hogy kiváltsák a BannerBomb3 és az unSAFE_MODE exploit-okat.
|
||||
In this section, you will copy the files needed to trigger the unSAFE_MODE exploit onto your device's SD card.
|
||||
|
||||
1. Ha a konzolod be van kapcsolva, most kapcsold ki
|
||||
1. Nyisd meg az [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php/) oldalt a számítógépeden
|
||||
1. Töltsd fel a `movable.sed` fájlod a "Choose File" opcióval
|
||||
1. Kattints a "Build and Download"-ra
|
||||
+ Ez letölt egy exploit DSiWare-t `F00D43D5.bin` néven és egy SAFE_MODE exploit adatfájlt `usm.bin` néven egy zip mappán belül (`unSAFE_MODE.zip`)
|
||||
1. Helyezd az SD kártyád a számítógépbe
|
||||
1. Your SD card should be inserted in your computer
|
||||
1. Másold át a `boot.firm` és `boot.3dsx` fájlt a Luma3DS `.zip`-ből az SD kártya gyökerébe
|
||||
+ Az SD kártya gyökere a kezdőkönyvtárt jelenti az SD kártyán, ahol látható a Nintendo 3DS könyvtár, de nem vagyunk benne
|
||||
1. Hozz létre egy mappát `boot9strap` néven az SD kártya gyökerében
|
||||
1. Másold át a `boot9strap.firm` fájlt és a `boot9strap.firm.sha` fájlt a boot9strap `.zip` fájlból az SD kártyád `/boot9strap/` mappájába
|
||||
1. Másold át a `SafeB9SInstaller.bin` fájlt a SafeB9SInstaller `.zip`-ből az SD kártyád gyökerébe
|
||||
1. Másold át a `usm.bin` fájlt az `unSAFE_MODE.zip`-ből az SD kártya gyökerébe
|
||||
![]({{ "/images/screenshots/bb3/usm-root-layout.png" | absolute_url }}){: .notice--info}
|
||||
![]({{ "/images/screenshots/boot9strap-folder.png" | absolute_url }}){: .notice--info}
|
||||
1. Navigálj a `Nintendo 3DS` -> `<ID0>` -> `<ID1>` mappába az SD kártyádon
|
||||
+ Az `<ID0>` egy 32 karakter hosszú mappanév, amit a [Seedminer](seedminer)-nél másoltál
|
||||
+ Az `<ID1>` egy 32 karakter hosszú nevű mappa az `<ID0>` mappában
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Hozz létre egy `Nintendo DSiWare` nevű mappát az `<ID1>` mappában
|
||||
+ Ha már van mappád *és* van benne DSiWare mentés fájl (`<8-character-id>.bin`), másold őket a számítógépedre és töröld őket az SD kártyáról
|
||||
1. Másold `F00D43D5.bin` fájlt az `unSAFE_MODE.zip`-ből a `Nintendo DSiWare` mappába
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
1. Copy `usm.bin` to the root of your SD card
|
||||
|
||||
#### II. rész - BannerBomb3
|
||||
|
||||
|
|
@ -66,9 +49,9 @@ Ebben a fejezetben elő fogod idézni a BannerBomb3 exploit-ot a DSIWare Managem
|
|||
1. Kapcsold be a készülékedet
|
||||
1. Lépj be a System Settings-be a készülékeden
|
||||
1. Navigálj ide: `Data Management` -> `DSiWare` -> `SD Card` ([kép](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Az eszközödnek meg kell jelenítenie a [Bannerbomb3 menüt](/images/screenshots/bb3/usm-menu.png)
|
||||
+ Ha ez a lépés összeomlasztja az eszközödet, [folytasd a hibaelhárítási útmutatóval](troubleshooting#dsiware-management-menu-crashes-without-showing-usm-menu)
|
||||
1. Nyomd meg az (A) gombot, az "Inject haxx" kiválasztásához
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-usm)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Install unSAFE_MODE"
|
||||
+ Az eszközöd automatikusan ki fog kapcsolni
|
||||
|
||||
#### III. rész - unSAFE_MODE
|
||||
|
|
@ -77,7 +60,7 @@ Ebben a fejezetben be fogsz lépni a Safe Mode-ba (egy funkció, ami elérhető
|
|||
|
||||
1. Az eszközöd kikapcsolt állapotában tartsd nyomva a következő gombokat: (Bal Váll) + (Jobb Váll) + (D-Pad Fel) + (A), majd ezen gombok nyomva tartása mellett kapcsold be az eszközöd
|
||||
+ Tartsd nyomva a gombokat, amíg az eszköz be nem bootol a Safe Mode-ba (a "system update" menübe)
|
||||
+ Ha többszöri próbálkozásra sem tudsz bejutni a Safe Mode-ba, valamelyik gombod hibás lehet. Ha ez a helyzet, akkor [a Seedminer alternatív ágát](bannerbomb3) kell követned. Ha támogatásra van szükséged az anyaggal kapcsolatosan, csatlakozz a [Nintendo Homebrew-hoz Discord-on](https://discord.gg/MWxPgEp) és kérj, angolul, támogatást.
|
||||
+ Ha többszöri próbálkozásra sem tudsz bejutni a Safe Mode-ba, valamelyik gombod hibás lehet. If this is the case, you will need to follow [an alternate branch of BannerBomb3](installing-boot9strap-(fredtool)). Ha támogatásra van szükséged az anyaggal kapcsolatosan, csatlakozz a [Nintendo Homebrew-hoz Discord-on](https://discord.gg/MWxPgEp) és kérj, angolul, támogatást.
|
||||
1. Nyomj "OK"-ot a frissítés elfogadásához
|
||||
+ Nincs frissítés. Ez része az exploitnak
|
||||
1. Nyomj az "I accept"-re a feltételek elfogadásához
|
||||
|
|
@ -107,8 +90,7 @@ Ebben a fejezetben elő fogod idézni a BannerBomb3 exploit-ot egy második alka
|
|||
|
||||
1. Lépj be a System Settings-be a készülékeden
|
||||
1. Navigálj ide: `Data Management` -> `DSiWare` -> `SD Card` ([kép](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Az eszközödnek meg kell jelenítenie a [Bannerbomb3 menüt](/images/screenshots/bb3/usm-menu.png)
|
||||
1. Használd a D-Pad-et a navigáláshoz, és nyomd meg az (A) gombot a "Restore slots" kiválasztásához
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Uninstall unSAFE_MODE"
|
||||
+ Az eszközöd automatikusan újra fog indulni
|
||||
1. Kapcsold ki a készüléked
|
||||
1. Helyezd az SD kártyád a számítógépbe
|
||||
|
|
|
|||
|
|
@ -56,6 +56,7 @@ Ebben a fejezetben a Bruteforce Movable weboldalt fogod használni, hogy megszer
|
|||
+ Ha egy fél óra után is még mindig várakozol, csatlakozz a [Nintendo Homebrew Discord-on](https://discord.gg/MWxPgEp) csatornához, és kérj segítséget (angol nyelven) valakitől
|
||||
1. Amikor a folyamat befejeződött, töltsd le a `movable.sed` fájlodat az oldalról
|
||||
+ Őrizd meg ezt fájlt, mert szükséged lesz rá a következő oldalkon
|
||||
1. Kapcsold ki a készüléked
|
||||
|
||||
___
|
||||
|
||||
|
|
@ -63,11 +64,11 @@ ___
|
|||
|
||||
Ha meg van az eszközöd titkosítási kulcsa (`movable.sed`) más exploitokkal együtt fogod használni az egyedi firmware telepítéséhez.
|
||||
|
||||
#### unSAFE_MODE (Ajánlott)
|
||||
#### BannerBomb3
|
||||
|
||||
Ez a módszere a Seedminer használatának további exploitoláshoz használja a `movable.sed` fájlod, hogy kihasználja a SAFE_MODE firmware exploitjait, amelyek megtalálhatók minden 3DS egységen.
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the System Settings application.
|
||||
|
||||
Tovább a [Boot9strap telepítésére (USM)](installing-boot9strap-(usm))
|
||||
Continue to [BannerBomb3](bannerbomb3)
|
||||
{: .notice--primary}
|
||||
|
||||
___
|
||||
|
|
|
|||
|
|
@ -126,11 +126,11 @@ Ha ez sikertelen, próbálkozz egy másik SD kártyával.
|
|||
|
||||
## Boot9strap telepítése (USM)
|
||||
|
||||
### A DSiWare Management menü összeomlik az USM menü megjelenése nélkül
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (USM)
|
||||
|
||||
Biztosítsd, hogy az `F00D43D5.bin` az egyetlen fájl a `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` mappában. Ha így van, hozd létre újra az [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php) segítségével.
|
||||
Biztosítsd, hogy az `F00D43D5.bin` az egyetlen fájl a `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` mappában. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Továbbá légy biztos abban, hogy az `usm.bin` fájl megtalálható az SD kártyád gyökerében. Ha hiányzik, töltsd le a legutolsó kiadását az [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/latest)-nak (a RELEASE `.zip` fájl), és másold az `usm.bin` fájlt az SD kártyád gyökerébe.
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
Ha ezen megoldások egyike sem javítja ezt a probélmát, akkor az egyedi firmware eltávolításra kerülhetett erről az eszközről, úgy, hogy az lehetetlenné teszi ennek a metódusnak a végrehajtását. Ha ez a helyzet, akkor [a Seedminer alternatív ágát](homebrew-launcher-(pichaxx)) kell követned. Ha támogatásra van szükséged az anyaggal kapcsolatosan, csatlakozz a [Nintendo Homebrew-hoz Discord-on](https://discord.gg/MWxPgEp) és kérj, angolul, támogatást.
|
||||
|
||||
|
|
@ -144,16 +144,24 @@ Az `F00D43D5.bin` hiányzik a `Nintendo 3DS` -> `<ID0>` - > `<ID1>` -> `Nintendo
|
|||
|
||||
### A DSiWare Management egy kérdőjelet mutat
|
||||
|
||||
Probléma van az `F00D43D5.bin` fájloddal (hibás vagy másik 3DS-hez tartozik). Hozd létre újra az `F00D43D5.bin` fájlod a [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php) segítségével, biztosítva azt, hogy a konzolod `movable.sed` fájlját használod hozzá.
|
||||
Probléma van az `F00D43D5.bin` fájloddal (hibás vagy másik 3DS-hez tartozik). Re-create your `F00D43D5.bin` file with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen), ensuring that you use the `movable.sed` file for your console.
|
||||
|
||||
### A DSiWare Management menü összeomlik lila képernyővel
|
||||
|
||||
Biztosítsd, hogy az `F00D43D5.bin` az egyetlen fájl a `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` mappában. Ha így van, hozd létre újra a [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php) segítségével. Ha ez sikertelen, az egyedi firmware lehetséges, hogy úgy lett eltávolítva erről az eszközről, hogy lehetetlenné teszi ennek a metódusnak a végrehajtását. Ha ez az eset, csatlakozz a [Nintendo Homebrew-hoz a Discord-on](https://discord.gg/MWxPgEp) segítségért.
|
||||
Biztosítsd, hogy az `F00D43D5.bin` az egyetlen fájl a `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` mappában. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen). Ha ez sikertelen, az egyedi firmware lehetséges, hogy úgy lett eltávolítva erről az eszközről, hogy lehetetlenné teszi ennek a metódusnak a végrehajtását. Ha ez az eset, csatlakozz a [Nintendo Homebrew-hoz a Discord-on](https://discord.gg/MWxPgEp) segítségért.
|
||||
|
||||
---
|
||||
|
||||
## Boot9strap telepítése (Fredtool)
|
||||
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (Fredtool)
|
||||
|
||||
Biztosítsd, hogy az `F00D43D5.bin` az egyetlen fájl a `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` mappában. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
Ha ezen megoldások egyike sem javítja ezt a probélmát, akkor az egyedi firmware eltávolításra kerülhetett erről az eszközről, úgy, hogy az lehetetlenné teszi ennek a metódusnak a végrehajtását. Ebben az esetben csatlakozz a [Nintendo Homebrew-hoz Discord-on](https://discord.gg/MWxPgEp) és kérj, támogatást angolul.
|
||||
|
||||
### Hiba a Fredtool Injector oldalon
|
||||
|
||||
Biztosítsd, hogy a `movable.sed` és a DSiWare mentés ugyanarról a konzolról származik. Egy eltérés hibához vezet.
|
||||
|
|
|
|||
|
|
@ -6,8 +6,8 @@ title: "BannerBomb3"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>To dump system DSiWare, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system in order to dump the DSi Internet Settings application to the SD root.</p>
|
||||
<p>To launch custom code, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system.</p>
|
||||
<p>For a more technical explanation, see <a href="https://github.com/zoogie/Bannerbomb3">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
|
@ -27,38 +27,43 @@ If you have a Taiwanese console (indicated by a T after the system version), fol
|
|||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 exploit onto your device's SD card.
|
||||
|
||||
1. Open [BannerBomb3 Tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php) on your computer
|
||||
1. Upload your movable.sed using the "Choose File" option
|
||||
1. Click "Build and Download"
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` inside of a zip file (`BannerBomb3.zip`)
|
||||
1. If your console is powered on, power off your console
|
||||
1. Power off your device
|
||||
1. Insert your SD card into your computer
|
||||
1. Open [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen) on your computer
|
||||
1. Upload your movable.sed using the “Choose File” option
|
||||
1. Click “Build and Download”
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a payload called `bb3.bin` inside of a zip archive (`DSIWARE_EXPLOIT.zip`)
|
||||
1. Copy `bb3.bin` from `DSIWARE_EXPLOIT.zip` to the root of your SD card
|
||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `BannerBomb3.zip` to the `Nintendo DSiWare` folder
|
||||
1. Copy the `F00D43D5.bin` file from `DSIWARE_EXPLOIT.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
#### Section II - Hardware Button Check
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next page.
|
||||
In this section, you will test the SAFE_MODE function of your device. This will determine which method you will follow in the next page.
|
||||
|
||||
1. Reinsert your SD card into your device
|
||||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare` -> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your system should flash Magenta (pink/purple) and then crash a few seconds later. This means it worked
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
1. If prompted to update, press Cancel
|
||||
+ If the device boots to the HOME Menu, just continue to the next step
|
||||
1. Power off your device
|
||||
1. Insert your SD card into your computer
|
||||
1. You should now have `42383841.bin` on the root of your SD card. Copy this file to somewhere on your computer, as you will use it on the next page
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
1. Delete `F00D43D5.bin` from your Nintendo DSiWare folder and from your computer. This file will not be needed anymore
|
||||
|
||||
___
|
||||
|
||||
Continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
### Next steps: Choose an exploit
|
||||
|
||||
If your device booted into Safe Mode and prompted to you to do a system update in Section II, Safe Mode is working on your device.
|
||||
|
||||
If your device booted into Safe Mode, continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
{: .notice--primary}
|
||||
|
||||
If your device did NOT boot into Safe Mode, continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
{: .notice--warning}
|
||||
|
|
|
|||
|
|
@ -6,14 +6,13 @@ title: "Installing boot9strap (Fredtool)"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application. This requires you to have a DSiWare backup, which you should have gotten in the previous section.</p>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application.</p>
|
||||
<p>This is a currently working implementation of the "FIRM partitions known-plaintext" exploit detailed <a href="https://www.3dbrew.org/wiki/3DS_System_Flaws">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
||||
### What You Need
|
||||
|
||||
* A DSiWare Backup, normally `42383841.bin` (You should have one on the root of your SD card from following [BannerBomb3](bannerbomb3))
|
||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||
* The latest release of [Frogminer_save](https://github.com/zoogie/Frogminer/releases/latest) (`Frogminer_save.zip`)
|
||||
* The latest release of [b9sTool](https://github.com/zoogie/b9sTool/releases/latest) (`boot.nds`)
|
||||
|
|
@ -27,17 +26,32 @@ As an additional safety measure, we will perform an additional check for custom
|
|||
1. Hold the (Select) button
|
||||
1. Power on your device while still holding the (Select) button
|
||||
1. If the check was successful, you will boot to the HOME Menu and you may proceed with this guide
|
||||
1. Power off your device
|
||||
|
||||
If you see a configuration menu, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
If you see a configuration menu or the console immediately powers off, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
{: .notice--danger}
|
||||
|
||||
#### Section II - Prep Work
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next section.
|
||||
|
||||
1. Reinsert your SD card into your device
|
||||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-fredtool)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Dump DSiWare"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - Prep Work
|
||||
|
||||
In this section, you will copy the files necessary to temporarily replace DS Connection Settings with Flipnote Studio, which is used to launch the boot9strap (custom firmware) installer.
|
||||
|
||||
1. Insert your SD card into your computer
|
||||
1. Open the [DSIHaxInjector_new](https://jenkins.nelthorya.net/job/DSIHaxInjector_new/build?delay=0sec) website on your computer
|
||||
1. Under the "Username" field, enter any alphanumeric name (no spaces or special characters)
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file using the first "Browse..." option
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file from the root of your SD card using the first "Browse..." option
|
||||
1. Under the "MovableSed" field, upload your `movable.sed` file using the second "Browse..." option
|
||||
1. Under the "InjectionTarget" field, set the injection target to `DSinternet` (NOT memorypit)
|
||||
1. Click "Build"
|
||||
|
|
@ -46,7 +60,6 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
1. Click on the first search result
|
||||
+ This result should have the latest timestamp
|
||||
1. Click the "output_(name).zip" link
|
||||
1. Insert your SD card into your computer
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
|
|
@ -60,7 +73,7 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
![]({{ "/images/screenshots/fredtool-root-layout.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section III - Overwriting DS Connection Settings
|
||||
#### Section IV - Overwriting DS Connection Settings
|
||||
|
||||
In this section, you will copy the hacked DS Connection Settings DSiWare to internal memory, which will temporarily replace it with Flipnote Studio.
|
||||
|
||||
|
|
@ -73,7 +86,7 @@ In this section, you will copy the hacked DS Connection Settings DSiWare to inte
|
|||
1. Navigate to `Internet Settings` -> `Nintendo DS Connections`, then select "OK" ([image](/images/screenshots/fredtool/dsconnection.png))
|
||||
1. If the exploit was successful, your device will have loaded the JPN version of Flipnote Studio
|
||||
|
||||
#### Section IV - Flipnote Exploit
|
||||
#### Section V - Flipnote Exploit
|
||||
|
||||
If you would prefer a visual guide to this section, one is available [here](https://zoogie.github.io/web/flipnote_directions/).
|
||||
{: .notice--info}
|
||||
|
|
@ -99,7 +112,7 @@ In this section, you will perform a series of very specific steps within Flipnot
|
|||
+ If your device shuts down when you try to power it on, ensure that you have copied `boot.firm` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ If you see the Luma Configuration screen, press (Start) to reboot, then continue with the guide
|
||||
|
||||
#### Section V - Luma3DS Verification
|
||||
#### Section VI - Luma3DS Verification
|
||||
|
||||
Due to the nature of the exploit used, it is occasionally (but rarely) possible for boot9strap to not actually get installed. This section will therefore verify that boot9strap was successfully installed by seeing if some files that are normally automatically generated by Luma3DS were created.
|
||||
|
||||
|
|
@ -113,9 +126,9 @@ At this point, your console will boot to Luma3DS by default.
|
|||
+ Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
|
||||
+ On the next page, you will install useful homebrew applications to complete your setup.
|
||||
|
||||
#### Section VI - Restoring DS Connection Settings
|
||||
#### Section VII - Restoring DS Connection Settings
|
||||
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section III.
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section IV.
|
||||
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
1. Copy the `42383841.bin` file from the `clean` folder of the downloaded DSiWare archive (output_(name).zip) to the `Nintendo DSiWare` folder, replacing the existing one
|
||||
|
|
|
|||
|
|
@ -18,45 +18,28 @@ title: "Installing boot9strap (USM)"
|
|||
|
||||
These instructions work on USA, Europe, Japan, and Korea region consoles as indicated by the letters U, E, J, or K after the system version.
|
||||
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
{: .notice--warning}
|
||||
|
||||
### What You Need
|
||||
|
||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||
* The latest release of [SafeB9SInstaller](https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip) (direct download)
|
||||
* The latest release of [boot9strap](https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip) (direct download)
|
||||
* The latest release of [Luma3DS](https://github.com/LumaTeam/Luma3DS/releases/latest) (the Luma3DS `.zip` file)
|
||||
* The latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/download/v1.3/usm.bin) (direct download)
|
||||
|
||||
|
||||
#### Section I - Prep Work
|
||||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 and unSAFE_MODE exploits onto your device's SD card.
|
||||
In this section, you will copy the files needed to trigger the unSAFE_MODE exploit onto your device's SD card.
|
||||
|
||||
1. If your device is powered on, power off your device
|
||||
1. Open [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php) on your computer
|
||||
1. Upload your movable.sed using the "Choose File" option
|
||||
1. Click "Build and Download"
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a SAFE_MODE exploit data file called `usm.bin` inside of a zip archive (`unSAFE_MODE.zip`)
|
||||
1. Insert your SD card into your computer
|
||||
1. Your SD card should be inserted in your computer
|
||||
1. Copy `boot.firm` and `boot.3dsx` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||
1. Create a folder named `boot9strap` on the root of your SD card
|
||||
1. Copy `boot9strap.firm` and `boot9strap.firm.sha` from the boot9strap `.zip` to the `/boot9strap/` folder on your SD card
|
||||
1. Copy `SafeB9SInstaller.bin` from the SafeB9SInstaller `.zip` to the root of your SD card
|
||||
1. Copy `usm.bin` from `unSAFE_MODE.zip` to the root of your SD card
|
||||
![]({{ "/images/screenshots/bb3/usm-root-layout.png" | absolute_url }}){: .notice--info}
|
||||
![]({{ "/images/screenshots/boot9strap-folder.png" | absolute_url }}){: .notice--info}
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `unSAFE_MODE.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
1. Copy `usm.bin` to the root of your SD card
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
|
|
@ -66,9 +49,9 @@ In this section, you will trigger the BannerBomb3 exploit using the DSiWare Mana
|
|||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-usm-menu)
|
||||
1. Press (A) to select "Inject haxx"
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-usm)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Install unSAFE_MODE"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - unSAFE_MODE
|
||||
|
|
@ -77,7 +60,7 @@ In this section, you will enter Safe Mode (a feature available on all 3DS family
|
|||
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of BannerBomb3](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
1. Press "OK" to accept the update
|
||||
+ There is no update. This is part of the exploit
|
||||
1. Press "I accept" to accept the terms and conditions
|
||||
|
|
@ -107,8 +90,7 @@ In this section, you will trigger the BannerBomb3 exploit a second time so that
|
|||
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Restore slots"
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Uninstall unSAFE_MODE"
|
||||
+ Your device will automatically reboot
|
||||
1. Power off your device
|
||||
1. Insert your SD card into your computer
|
||||
|
|
|
|||
|
|
@ -56,6 +56,7 @@ In this section, you will use the Bruteforce Movable website to retrieve your de
|
|||
+ If you are still waiting after half an hour, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask (in English) for someone there to assist you
|
||||
1. When the process is completed, download your `movable.sed` file from the site
|
||||
+ Keep this file as you will need it in the upcoming pages
|
||||
1. Power off your device
|
||||
|
||||
___
|
||||
|
||||
|
|
@ -63,11 +64,11 @@ ___
|
|||
|
||||
Once you have your device's encryption key (`movable.sed`), you will use it in conjunction with other exploits to install custom firmware on your 3DS.
|
||||
|
||||
#### unSAFE_MODE (Recommended)
|
||||
#### BannerBomb3
|
||||
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the SAFE_MODE firmware present in all 3DS units.
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the System Settings application.
|
||||
|
||||
Continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
Continue to [BannerBomb3](bannerbomb3)
|
||||
{: .notice--primary}
|
||||
|
||||
___
|
||||
|
|
|
|||
|
|
@ -126,11 +126,11 @@ If this is unsuccessful, try using another SD card.
|
|||
|
||||
## Installing boot9strap (USM)
|
||||
|
||||
### DSiWare Management menu crashes without showing USM menu
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (USM)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php).
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `usm.bin` is on the root of the SD card. If it is missing, then download the latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/latest) (the RELEASE `.zip` file), and copy the `usm.bin` file to the root of your SD card.
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, you will need to follow [an alternate branch of Seedminer](homebrew-launcher-(pichaxx)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
|
|
@ -144,16 +144,24 @@ If neither of these solutions fixes this problem, then custom firmware may have
|
|||
|
||||
### DSiWare Management shows a question mark
|
||||
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php), ensuring that you use the `movable.sed` file for your console.
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen), ensuring that you use the `movable.sed` file for your console.
|
||||
|
||||
### DSiWare Management menu crashes without purple screen
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
|
||||
---
|
||||
|
||||
## Installing boot9strap (Fredtool)
|
||||
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (Fredtool)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
### Error on Fredtool Injector page
|
||||
|
||||
Ensure that your `movable.sed` and DSiWare backup come from the same console. A mismatch will result in an error.
|
||||
|
|
|
|||
|
|
@ -6,8 +6,8 @@ title: "BannerBomb3"
|
|||
|
||||
<details>
|
||||
<summary><em>Dettagli Tecnici (opzionale)</em></summary>
|
||||
<p>Per eseguire un dump dei DSiWare di sistema, approfittiamo di una falla di sicurezza nella sezione Gestione Nintendo DSiWare dell'applicazione Impostazioni della console.</p>
|
||||
<p>A questo scopo, utilizziamo la chiave di cifratura della tua console (movable.sed) per generare un backup DSiWare che induce la console a creare un dump dell'applicazione Impostazioni Internet DSi nella directory principale della scheda SD.</p>
|
||||
<p>To launch custom code, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system.</p>
|
||||
<p>Per una spiegazione più tecnica, consulta <a href="https://github.com/zoogie/Bannerbomb3">questa pagina</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
|
@ -27,38 +27,43 @@ Se hai una console taiwanese (indicata da una T dopo la versione di sistema), se
|
|||
|
||||
In questa sezione, copierai i file necessari per attivare l'exploit BannerBomb3 nella scheda SD della tua console.
|
||||
|
||||
1. Avvia [BannerBomb3 Tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php) sul tuo computer
|
||||
1. Carica il tuo file movable.sed scegliendo l'opzione "Choose File"
|
||||
1. Seleziona "Build and Download"
|
||||
+ Verrà scaricato un DSiWare da usare come exploit chiamato `F00D43D5.bin`all'interno di un file zip (`BannerBomb3.zip`)
|
||||
1. Se la tua console è accesa, spegnila
|
||||
1. Spegni il tuo 3DS
|
||||
1. Inserisci la scheda SD nel tuo computer
|
||||
1. Open [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen) on your computer
|
||||
1. Upload your movable.sed using the “Choose File” option
|
||||
1. Click “Build and Download”
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a payload called `bb3.bin` inside of a zip archive (`DSIWARE_EXPLOIT.zip`)
|
||||
1. Copy `bb3.bin` from `DSIWARE_EXPLOIT.zip` to the root of your SD card
|
||||
+ La directory principale della scheda SD è la cartella della tua scheda SD in cui è possibile visualizzare la cartella Nintendo 3DS, ma non il suo interno
|
||||
1. Nella tua scheda SD, entra in `Nintendo 3DS` -> `<ID0>` -> `<ID1>`
|
||||
+ `<ID0>` è il nome a 32 lettere della cartella che hai copiato in [Seedminer](seedminer)
|
||||
+ `<ID1>` è una cartella dal nome lungo 32 caratteri all'interno di `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Crea una cartella chiamata `Nintendo DSiWare` all'interno di `<ID1>`
|
||||
+ Se hai già la cartella *e* sono già presenti dei file di backup DSiWare (`<id-a-8-caratteri>.bin`) all'interno, copiali sul PC e rimuovili dalla scheda SD
|
||||
1. Copia il file `F00D43D5.bin` da `BannerBomb3.zip` nella cartella `Nintendo DSiWare`
|
||||
1. Copy the `F00D43D5.bin` file from `DSIWARE_EXPLOIT.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Sezione II - BannerBomb3
|
||||
#### Section II - Hardware Button Check
|
||||
|
||||
In questa sezione, attiverai l'exploit BannerBomb3 utilizzando il menu Gestione Nintendo DSiWare e copierai il file dump risultante sul computer per poterlo utilizzare nella pagina successiva.
|
||||
In this section, you will test the SAFE_MODE function of your device. This will determine which method you will follow in the next page.
|
||||
|
||||
1. Reinserisci la scheda SD nella tua console
|
||||
1. Accendi la console
|
||||
1. Avvia "Impostazioni della console"
|
||||
1. Entra in `Gestione dati` -> `DSiWare` -> `Scheda SD` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Lo schermo della console dovrebbe lampeggiare magenta (rosa/viola), per poi crashare qualche secondo dopo. Ciò significa che l'exploit ha avuto successo
|
||||
1. Con la console ancora spenta, tieni premuto i pulsanti (L) + (R) + (Su) + (A), dopodiché, tenendo premuti i pulsanti, accendi la console
|
||||
+ Mantieni premuti i pulsanti finché la console non si avvia in Safe Mode (una specie di menu per aggiornare il sistema)
|
||||
1. If prompted to update, press Cancel
|
||||
+ If the device boots to the HOME Menu, just continue to the next step
|
||||
1. Spegni il tuo 3DS
|
||||
1. Inserisci la scheda SD nel tuo computer
|
||||
1. Ora dovresti avere il file `42383841.bin` nella directory principale della tua scheda SD. Copia questo file da qualche parte sul tuo computer, dato che lo userai nella prossima pagina
|
||||
1. Nella tua scheda SD, entra in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`
|
||||
1. Elimina il file `F0D43D5.bin` dalla cartella Nintendo DSiWare e dal tuo computer. Questo file non sarà più necessario
|
||||
|
||||
___
|
||||
|
||||
+ Prosegui con l'[Installazione di boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
### Passaggi successivi: Scelta di un exploit
|
||||
|
||||
If your device booted into Safe Mode and prompted to you to do a system update in Section II, Safe Mode is working on your device.
|
||||
|
||||
If your device booted into Safe Mode, continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
{: .notice--primary}
|
||||
|
||||
If your device did NOT boot into Safe Mode, continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
{: .notice--warning}
|
||||
|
|
|
|||
|
|
@ -6,14 +6,13 @@ title: "Installazione di boot9strap (Fredtool)"
|
|||
|
||||
<details>
|
||||
<summary><em>Dettagli Tecnici (opzionale)</em></summary>
|
||||
<p>Seedminer utilizza il tuo file <code>movable.sed</code> per decriptare un qualunque titolo DSiWare ed iniettare una particolare applicazione DSiWare nell'applicazione Connessioni Nintendo DS. Questo richiede di avere un backup DSiWare, che dovresti aver ottenuto nella sezione precedente.</p>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application.</p>
|
||||
<p>Utilizzeremo una falla, attualmente funzionante, denominata "FIRM partitions known-plaintext" <a href="https://www.3dbrew.org/wiki/3DS_System_Flaws">qui</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
||||
### Cosa serve
|
||||
|
||||
* Un backup DSiWare, di solito `42383841.bin` (dovresti averne uno nella directory principale della tua scheda SD dopo aver seguito [BannerBomb3](bannerbomb3))
|
||||
* Il tuo file `movable.sed` dalla sezione [Seedminer](seedminer)
|
||||
* L'ultima versione di [Frogminer_save](https://github.com/zoogie/Frogminer/releases/latest) (`Frogminer_save.zip`)
|
||||
* L'ultima versione di [b9sTool](https://github.com/zoogie/b9sTool/releases/latest) (`boot.nds`)
|
||||
|
|
@ -27,17 +26,32 @@ Come precauzione aggiuntiva, controlleremo anche la presenza di un custom firmwa
|
|||
1. Premi il pulsante (Select)
|
||||
1. Accendi la tua console continuando a tenere premuto il pulsante (Select)
|
||||
1. Se il controllo è andato a buon fine, verrà avviato il menu HOME e potrai procedere con questa guida
|
||||
1. Spegni il tuo 3DS
|
||||
|
||||
Se visualizzi un menu di configurazione, hai già un CFW e continuando con queste istruzioni potresti BRICKARE la tua console! Procedi con la [Verifica del CFW](checking-for-cfw) per aggiornare il tuo CFW esistente.
|
||||
If you see a configuration menu or the console immediately powers off, you already have CFW, and continuing with these instructions may BRICK your device! Procedi con la [Verifica del CFW](checking-for-cfw) per aggiornare il tuo CFW esistente.
|
||||
{: .notice--danger}
|
||||
|
||||
#### Sezione II - Preparazione
|
||||
#### Sezione II - BannerBomb3
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next section.
|
||||
|
||||
1. Reinserisci la scheda SD nella tua console
|
||||
1. Accendi la console
|
||||
1. Avvia "Impostazioni della console"
|
||||
1. Entra in `Gestione dati` -> `DSiWare` -> `Scheda SD` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-fredtool)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Dump DSiWare"
|
||||
+ La tua console si spegnerà automaticamente
|
||||
|
||||
#### Section III - Prep Work
|
||||
|
||||
In questa sezione copierai i file necessari per sostituire temporaneamente "Impostazioni di collegamento" con Flipnote Studio, usato per lanciare l'installer di boot9strap (custom firmware).
|
||||
|
||||
1. Inserisci la scheda SD nel tuo computer
|
||||
1. Apri il sito [DSIHaxInjector_new](https://jenkins.nelthorya.net/job/DSIHaxInjector_new/build?delay=0sec) sul tuo computer
|
||||
1. Sotto il campo "Username" inserisci un nome alfanumerico qualunque (senza spazi o caratteri speciali)
|
||||
1. Sul il campo "DSiBin", carica il tuo file `42383841.bin` usando la prima opzione "Browse..."
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file from the root of your SD card using the first "Browse..." option
|
||||
1. Sul campo "MovableSed", carica il tuo file `movable.sed` usando la seconda opzione "Browse..."
|
||||
1. Sul campo "InjectionTarget", imposta l'obiettivo dell'iniezione su `DSinternet` (NON memorypit)
|
||||
1. Clicca "Build"
|
||||
|
|
@ -46,7 +60,6 @@ In questa sezione copierai i file necessari per sostituire temporaneamente "Impo
|
|||
1. Clicca sul primo risultato della ricerca
|
||||
+ Dovrebbe avere la data più recente
|
||||
1. Clicca il link "output_(name).zip"
|
||||
1. Inserisci la scheda SD nel tuo computer
|
||||
1. Nella tua scheda SD, entra in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`
|
||||
+ `<ID0>` è il nome a 32 lettere della cartella che hai copiato in [Seedminer](seedminer)
|
||||
+ `<ID1>` è una cartella dal nome lungo 32 caratteri all'interno di `<ID0>`
|
||||
|
|
@ -60,7 +73,7 @@ In questa sezione copierai i file necessari per sostituire temporaneamente "Impo
|
|||
![]({{ "/images/screenshots/fredtool-root-layout.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Sezione III - Sovrascrittura delle Impostazioni di collegamento DS
|
||||
#### Section IV - Overwriting DS Connection Settings
|
||||
|
||||
In questa sezione copierai il DSiWare modificato "Impostazioni di collegamento DS" nella memoria interna, che verrà così temporaneamente sostituito da Flipnote Studio.
|
||||
|
||||
|
|
@ -73,7 +86,7 @@ In questa sezione copierai il DSiWare modificato "Impostazioni di collegamento D
|
|||
1. Entra in `Impostazioni Internet` -> `Connessioni Nintendo DS`, quindi seleziona "OK" ([image](/images/screenshots/fredtool/dsconnection.png))
|
||||
1. Se l'exploit ha avuto successo, la tua console avrà caricato la versione JPN di Flipnote Studio
|
||||
|
||||
#### Sezione IV - Exploit Flipnote
|
||||
#### Sezione V - Exploit Flipnote
|
||||
|
||||
Se desideri una guida visiva per questa parte, è disponibile [qui](https://zoogie.github.io/web/flipnote_directions/).
|
||||
{: .notice--info}
|
||||
|
|
@ -99,7 +112,7 @@ In questa sezione eseguirai una serie di passaggi molto specifici all'interno di
|
|||
+ Se la console dovesse spegnersi quando provi ad accenderla, assicurati di aver copiato il file `boot.firm` dall'archivio `.zip` di Luma3DS nella directory principale della tua scheda SD
|
||||
+ Se vedi la schermata di configurazione di Luma, premi (Start) per riavviare la console, quindi continua con la guida
|
||||
|
||||
#### Sezione V - Verifica di Luma3DS
|
||||
#### Sezione VI - Verifica di Luma3DS
|
||||
|
||||
A causa della natura dell'exploit utilizzato, è, seppur raramente, possibile che boot9strap non venga effettivamente installato. Questa sezione verificherà quindi che boot9strap sia stato installato con successo verificando la presenza di file generati automaticamente da Luma3DS.
|
||||
|
||||
|
|
@ -113,9 +126,9 @@ A questo punto, la console avvierà sempre Luma3DS.
|
|||
+ Luma3DS non è diverso dal normale menu HOME. Se la console avvia il menu HOME, vuol dire che sta eseguendo il custom firmware.
|
||||
+ Nella pagina successiva installerai applicazioni homebrew utili per completare la tua installazione.
|
||||
|
||||
#### Sezione VI - Ripristino delle Impostazioni di Connessione DS
|
||||
#### Section VII - Restoring DS Connection Settings
|
||||
|
||||
In questa sezione ripristinerai "Impostazioni di collegamento DS" nel modo in cui era prima che fosse temporaneamente sostituito con Flipnote Studio nella Sezione III.
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section IV.
|
||||
|
||||
1. Nella tua scheda SD, entra in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`
|
||||
1. Copia il file `42383841.bin` dalla cartella `clean` dall'archivio DSiWare appena scaricato (`output_(name).zip`) nella cartella `Nintendo DSiWare`, sostituendo quello preesistente
|
||||
|
|
|
|||
|
|
@ -18,45 +18,28 @@ title: "Installazione di boot9strap (USM)"
|
|||
|
||||
Queste istruzioni funzionano su console americane, europee, giapponesi e coreane, indicate rispettivamente dalle lettere U, E, J o K dopo la versione del sistema operativo.
|
||||
|
||||
Se i tuoi pulsanti (L/R), (Su) o (A) non funzionano, dovrai usare [una versione alternativa di Seedminer](bannerbomb3). In questi casi, puoi ricevere assistenza chiedendo, in inglese, nel [canale Discord di Nintendo Homebrew](https://discord.gg/MWxPgEp).
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](installing-boot9strap-(fredtool)). In questi casi, puoi ricevere assistenza chiedendo, in inglese, nel [canale Discord di Nintendo Homebrew](https://discord.gg/MWxPgEp).
|
||||
{: .notice--warning}
|
||||
|
||||
### Cosa serve
|
||||
|
||||
* Il tuo file `movable.sed` dalla sezione [Seedminer](seedminer)
|
||||
* L'ultima versione di [SafeB9SInstaller](https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip) (download diretto)
|
||||
* L'ultima versione di [boot9strap](https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip) (download diretto)
|
||||
* L'ultima versione di [Luma3DS](https://github.com/LumaTeam/Luma3DS/releases/latest) (il file `.zip` di Luma3DS)
|
||||
* The latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/download/v1.3/usm.bin) (direct download)
|
||||
|
||||
|
||||
#### Sezione I - Preparazione
|
||||
|
||||
In questa sezione copierai i file necessari per attivare l'exploit BannerBomb3 e unSAFE_MODE nella scheda SD della tua console.
|
||||
In this section, you will copy the files needed to trigger the unSAFE_MODE exploit onto your device's SD card.
|
||||
|
||||
1. Se la tua console è accesa, spegnila
|
||||
1. Avvia [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php) sul tuo computer
|
||||
1. Carica il tuo file movable.sed scegliendo l'opzione "Choose File"
|
||||
1. Seleziona "Build and Download"
|
||||
+ Verrà scaricato un exploit DSiWare chiamato `F00D43D5.bin` e l'exploit di SAFE_MODE `usm.bin` all'interno di un archivio zip (`unSAFE_MODE.zip`)
|
||||
1. Inserisci la scheda SD nel tuo computer
|
||||
1. Your SD card should be inserted in your computer
|
||||
1. Copia i file `boot.firm` e `boot.3dsx` dall'archivio `.zip` di Luma3DS nella directory principale della tua scheda SD
|
||||
+ La directory principale della scheda SD è la cartella della tua scheda SD in cui è possibile visualizzare la cartella Nintendo 3DS, ma non il suo interno
|
||||
1. Crea una cartella chiamata `boot9strap` nella directory principale della tua scheda SD
|
||||
1. Copia i file `boot9strap.firm` e `boot9strap.firm.sha` dall'archivio `.zip` di boot9strap nella cartella `/boot9strap/` della tua scheda SD
|
||||
1. Copia il file `SafeB9SInstaller.bin` dall'archivio `.zip` di SafeB9SInstaller nella directory principale della tua scheda SD
|
||||
1. Copia il file `usm.bin` da `unSAFE_MODE.zip` nella directory principale della tua scheda SD
|
||||
![]({{ "/images/screenshots/bb3/usm-root-layout.png" | absolute_url }}){: .notice--info}
|
||||
![]({{ "/images/screenshots/boot9strap-folder.png" | absolute_url }}){: .notice--info}
|
||||
1. Nella tua scheda SD, entra in `Nintendo 3DS` -> `<ID0>` -> `<ID1>`
|
||||
+ `<ID0>` è il nome a 32 lettere della cartella che hai copiato in [Seedminer](seedminer)
|
||||
+ `<ID1>` è una cartella dal nome lungo 32 caratteri all'interno di `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Crea una cartella chiamata `Nintendo DSiWare` all'interno di `<ID1>`
|
||||
+ Se hai già la cartella *e* sono già presenti dei file di backup DSiWare (`<id-a-8-caratteri>.bin`) all'interno, copiali sul PC e rimuovili dalla scheda SD
|
||||
1. Copia il file `F00D43D5.bin` da `unSAFE_MODE.zip` nella cartella `Nintendo DSiWare`
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
1. Copy `usm.bin` to the root of your SD card
|
||||
|
||||
#### Sezione II - BannerBomb3
|
||||
|
||||
|
|
@ -66,9 +49,9 @@ In questa sezione attiverai l'exploit BannerBomb3 utilizzando il menu Gestione N
|
|||
1. Accendi la console
|
||||
1. Avvia "Impostazioni della console"
|
||||
1. Entra in `Gestione dati` -> `DSiWare` -> `Scheda SD` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ La tua console dovrebbe mostrare il [menu Bannerbomb3](/images/screenshots/bb3/usm-menu.png)
|
||||
+ Se questo passaggio causa il crash della tua console, [segui questa guida per risolvere il problema](troubleshooting#dsiware-management-menu-crashes-without-showing-usm-menu)
|
||||
1. Premi (A) per selezionare "Inject haxx"
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-usm)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Install unSAFE_MODE"
|
||||
+ La tua console si spegnerà automaticamente
|
||||
|
||||
#### Sezione III - unSAFE_MODE
|
||||
|
|
@ -77,7 +60,7 @@ In questa sezione avvierai la Modalità Provvisoria (una funzionalità disponibi
|
|||
|
||||
1. Con la console ancora spenta, tieni premuto i pulsanti (L) + (R) + (Su) + (A), dopodiché, tenendo premuti i pulsanti, accendi la console
|
||||
+ Mantieni premuti i pulsanti finché la console non si avvia in Safe Mode (una specie di menu per aggiornare il sistema)
|
||||
+ Se dopo molteplici tentativi non riesci ancora ad entrare in Safe Mode, potresti avere uno dei pulsanti difettosi o rotti. In tal caso, dovrai seguire [un metodo alternativo di Seedminer](bannerbomb3). In questi casi, puoi ricevere assistenza chiedendo, in inglese, nel [canale Discord di Nintendo Homebrew](https://discord.gg/MWxPgEp).
|
||||
+ Se dopo molteplici tentativi non riesci ancora ad entrare in Safe Mode, potresti avere uno dei pulsanti difettosi o rotti. If this is the case, you will need to follow [an alternate branch of BannerBomb3](installing-boot9strap-(fredtool)). In questi casi, puoi ricevere assistenza chiedendo, in inglese, nel [canale Discord di Nintendo Homebrew](https://discord.gg/MWxPgEp).
|
||||
1. Premi "OK" per accettare l'aggiornamento
|
||||
+ Non c'è alcun aggiornamento. Fa parte del procedimento
|
||||
1. Premi "Accetto" per accettare i termini e le condizioni
|
||||
|
|
@ -107,8 +90,7 @@ In questa sezione avvierai l'exploit BannerBomb3 una seconda volta per ripristin
|
|||
|
||||
1. Avvia "Impostazioni della console"
|
||||
1. Entra in `Gestione dati` -> `DSiWare` -> `Scheda SD` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ La tua console dovrebbe mostrare il [menu Bannerbomb3](/images/screenshots/bb3/usm-menu.png)
|
||||
1. Usa il D-Pad per spostarti sul menu "Restore slots", quindi premi il pulsante (A)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Uninstall unSAFE_MODE"
|
||||
+ La tua console si riavvierà automaticamente
|
||||
1. Spegni il tuo 3DS
|
||||
1. Inserisci la scheda SD nel tuo computer
|
||||
|
|
|
|||
|
|
@ -56,6 +56,7 @@ In questa sezione utilizzerai il sito web Bruteforce Movable per recuperare la c
|
|||
+ Se dopo mezz'ora non è successo nulla, entra nel [canale Discord di Nintendo Homebrew](https://discord.gg/MWxPgEp) (in Inglese) per richiedere assistenza
|
||||
1. Al termine del processo, scarica il tuo file `movable.sed` dal sito
|
||||
+ Conserva questo file in quanto ti servirà nelle pagine successive
|
||||
1. Spegni il tuo 3DS
|
||||
|
||||
___
|
||||
|
||||
|
|
@ -63,11 +64,11 @@ ___
|
|||
|
||||
Una volta ottenuta la chiave di crittografia della tua console (`movable.sed`), la userai in combinazione ad altri exploit per installare un custom firmware sul tuo 3DS.
|
||||
|
||||
#### unSAFE_MODE (Consigliato)
|
||||
#### BannerBomb3
|
||||
|
||||
Seedminer utilizza il tuo file `movable.sed` per sfruttare gli exploit presenti nel firmware SAFE_MODE presente in ogni console 3DS.
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the System Settings application.
|
||||
|
||||
Prosegui con l'[Installazione di boot9strap (USM)](installing-boot9strap-(usm))
|
||||
Continue to [BannerBomb3](bannerbomb3)
|
||||
{: .notice--primary}
|
||||
|
||||
___
|
||||
|
|
|
|||
|
|
@ -126,11 +126,11 @@ Se il problema non si risolve, prova ad usare un'altra scheda SD.
|
|||
|
||||
## Installazione di boot9strap (USM)
|
||||
|
||||
### Il menu di Gestione Nintendo DSiWare crasha senza mostrare il menu USM
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (USM)
|
||||
|
||||
Assicurati che il file `F00D43D5.bin` sia l'unico file presente in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. In tal caso, ricrealo con [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php).
|
||||
Assicurati che il file `F00D43D5.bin` sia l'unico file presente in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Inoltre, assicurati che il file `usm.bin` sia nella directory principale dela tua scheda SD. Se manca, scarica l'ultima versione di [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/latest) (il file RELEASE `.zip`), e copia il file `usm.bin` nella directory principale della tua scheda SD.
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
Se nessuna di queste soluzioni dovesse risolvere il problema, allora un custom firmware potrebbe essere già stato disinstallato da questa console in modo tale da rendere questo metodo impossibile. In questo caso, dovrai seguire [un metodo alternativo di Seedminer](homebrew-launcher-(pichaxx)). In questi casi, puoi ricevere assistenza chiedendo, in inglese, nel [canale Discord di Nintendo Homebrew](https://discord.gg/MWxPgEp).
|
||||
|
||||
|
|
@ -144,16 +144,24 @@ Manca il file `F00D43D5.bin` da `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintend
|
|||
|
||||
### Gestione Nintendo DSiWare mostra un punto interrogativo
|
||||
|
||||
Potrebbe esserci un problema con il tuo file `F00D43D5.bin` (potrebbe essere corrotto o per un diverso 3DS). Ri-crea il tuo file `F00D43D5.bin` con [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php), assicurandoti di utilizzare il file `movable.sed` della tua console.
|
||||
Potrebbe esserci un problema con il tuo file `F00D43D5.bin` (potrebbe essere corrotto o per un diverso 3DS). Re-create your `F00D43D5.bin` file with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen), ensuring that you use the `movable.sed` file for your console.
|
||||
|
||||
### Il menu di Gestione Nintendo DSiWare crasha senza schermata viola
|
||||
|
||||
Assicurati che il file `F00D43D5.bin` sia l'unico file presente in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. In tal caso, ricrealo con [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php). Se dovesse di nuovo fallire, potrebbe essere già stato disinstallato un custom firmware su questa console in modo tale da rendere questo metodo impossibile. In tal caso, entra nel [canale Discord di Nintendo Homebrew](https://discord.gg/MWxPgEp) per chiedere assistenza.
|
||||
Assicurati che il file `F00D43D5.bin` sia l'unico file presente in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen). Se dovesse di nuovo fallire, potrebbe essere già stato disinstallato un custom firmware su questa console in modo tale da rendere questo metodo impossibile. In tal caso, entra nel [canale Discord di Nintendo Homebrew](https://discord.gg/MWxPgEp) per chiedere assistenza.
|
||||
|
||||
---
|
||||
|
||||
## Installazione di boot9strap (Fredtool)
|
||||
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (Fredtool)
|
||||
|
||||
Assicurati che il file `F00D43D5.bin` sia l'unico file presente in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
Se nessuna di queste soluzioni dovesse risolvere il problema, allora un custom firmware potrebbe essere già stato disinstallato da questa console in modo tale da rendere questo metodo impossibile. In tal caso, puoi ricevere assistenza chiedendo, in inglese, nel [canale Discord di Nintendo Homebrew](https://discord.gg/MWxPgEp).
|
||||
|
||||
### Errore nella pagina Fredtool Injector
|
||||
|
||||
Assicurati che il file `movable.sed` e il backup DSiWare provengano dalla stessa console. La mancata corrispondenza comporterà un errore.
|
||||
|
|
|
|||
|
|
@ -6,8 +6,8 @@ title: "BannerBomb3"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>To dump system DSiWare, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system in order to dump the DSi Internet Settings application to the SD root.</p>
|
||||
<p>To launch custom code, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system.</p>
|
||||
<p>For a more technical explanation, see <a href="https://github.com/zoogie/Bannerbomb3">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
|
@ -27,38 +27,43 @@ If you have a Taiwanese console (indicated by a T after the system version), fol
|
|||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 exploit onto your device's SD card.
|
||||
|
||||
1. [BannerBomb3 Tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php) をあなたのコンピューターで開いてください。
|
||||
1. "ファイルを選択"から movable.sed ファイルをアップロードします。
|
||||
1. 「Build and Download」をクリックしてください。
|
||||
+ 脆弱性を含んだDSiWareである `F00D43D5.bin` が入ったZIPファイルをダウンロードします。 (`BannerBomb3.zip`)
|
||||
1. コンソールの電源が入っている場合は、コンソールの電源を切ります
|
||||
1. 本体の電源を切ります。
|
||||
1. パソコンにSDカードを入れます
|
||||
1. Open [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen) on your computer
|
||||
1. Upload your movable.sed using the “Choose File” option
|
||||
1. Click “Build and Download”
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a payload called `bb3.bin` inside of a zip archive (`DSIWARE_EXPLOIT.zip`)
|
||||
1. Copy `bb3.bin` from `DSIWARE_EXPLOIT.zip` to the root of your SD card
|
||||
+ SDカードのルートとは、Nintendo 3DSのフォルダなどがある最初の項目のことであり、フォルダの中ではありません。
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `BannerBomb3.zip` to the `Nintendo DSiWare` folder
|
||||
1. Copy the `F00D43D5.bin` file from `DSIWARE_EXPLOIT.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### セクション II - BannerBomb3
|
||||
#### Section II - Hardware Button Check
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next page.
|
||||
In this section, you will test the SAFE_MODE function of your device. This will determine which method you will follow in the next page.
|
||||
|
||||
1. 再度、SDカードを本体に挿入してください。
|
||||
1. デバイスの電源を入れます
|
||||
1. デバイスの「本体設定」を開きます。
|
||||
1. Navigate to `Data Management` -> `DSiWare` -> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ システムはマゼンダ（ピンク／パープル）色で点滅してから数秒でクラッシュするはずです。 それは成功したことを意味します。
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
1. If prompted to update, press Cancel
|
||||
+ If the device boots to the HOME Menu, just continue to the next step
|
||||
1. 本体の電源を切ります。
|
||||
1. パソコンにSDカードを入れます
|
||||
1. You should now have `42383841.bin` on the root of your SD card. Copy this file to somewhere on your computer, as you will use it on the next page
|
||||
1. SDカードの`Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`へ移動します
|
||||
1. Delete `F00D43D5.bin` from your Nintendo DSiWare folder and from your computer. このファイルはもう必要ありません。
|
||||
|
||||
___
|
||||
|
||||
引き続き [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool)) へ進んでください。
|
||||
### Next steps: Choose an exploit
|
||||
|
||||
If your device booted into Safe Mode and prompted to you to do a system update in Section II, Safe Mode is working on your device.
|
||||
|
||||
If your device booted into Safe Mode, continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
{: .notice--primary}
|
||||
|
||||
If your device did NOT boot into Safe Mode, continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
{: .notice--warning}
|
||||
|
|
|
|||
|
|
@ -6,14 +6,13 @@ title: "Installing boot9strap (Fredtool)"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application. This requires you to have a DSiWare backup, which you should have gotten in the previous section.</p>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application.</p>
|
||||
<p>This is a currently working implementation of the "FIRM partitions known-plaintext" exploit detailed <a href="https://www.3dbrew.org/wiki/3DS_System_Flaws">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
||||
### 必要なもの
|
||||
|
||||
* A DSiWare Backup, normally `42383841.bin` (You should have one on the root of your SD card from following [BannerBomb3](bannerbomb3))
|
||||
* [Seedminer](seedminer) より作成した、 `movable.sed` ファイル
|
||||
* The latest release of [Frogminer_save](https://github.com/zoogie/Frogminer/releases/latest) (`Frogminer_save.zip`)
|
||||
* The latest release of [b9sTool](https://github.com/zoogie/b9sTool/releases/latest) (`boot.nds`)
|
||||
|
|
@ -27,17 +26,32 @@ As an additional safety measure, we will perform an additional check for custom
|
|||
1. Hold the (Select) button
|
||||
1. Power on your device while still holding the (Select) button
|
||||
1. If the check was successful, you will boot to the HOME Menu and you may proceed with this guide
|
||||
1. 本体の電源を切ります。
|
||||
|
||||
If you see a configuration menu, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
If you see a configuration menu or the console immediately powers off, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
{: .notice--danger}
|
||||
|
||||
####セクションⅡ－準備
|
||||
#### セクション II - BannerBomb3
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next section.
|
||||
|
||||
1. 再度、SDカードを本体に挿入してください。
|
||||
1. デバイスの電源を入れます
|
||||
1. 「本体設定」を開きます。
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-fredtool)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Dump DSiWare"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - Prep Work
|
||||
|
||||
In this section, you will copy the files necessary to temporarily replace DS Connection Settings with Flipnote Studio, which is used to launch the boot9strap (custom firmware) installer.
|
||||
|
||||
1. パソコンにSDカードを入れます
|
||||
1. Open the [DSIHaxInjector_new](https://jenkins.nelthorya.net/job/DSIHaxInjector_new/build?delay=0sec) website on your computer
|
||||
1. Under the "Username" field, enter any alphanumeric name (no spaces or special characters)
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file using the first "Browse..." option
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file from the root of your SD card using the first "Browse..." option
|
||||
1. Under the "MovableSed" field, upload your `movable.sed` file using the second "Browse..." option
|
||||
1. Under the "InjectionTarget" field, set the injection target to `DSinternet` (NOT memorypit)
|
||||
1. Click "Build"
|
||||
|
|
@ -46,7 +60,6 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
1. Click on the first search result
|
||||
+ This result should have the latest timestamp
|
||||
1. Click the "output_(name).zip" link
|
||||
1. パソコンにSDカードを入れます
|
||||
1. SDカードの`Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`へ移動します
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
|
|
@ -60,7 +73,7 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
![]({{ "/images/screenshots/fredtool-root-layout.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section III - Overwriting DS Connection Settings
|
||||
#### Section IV - Overwriting DS Connection Settings
|
||||
|
||||
In this section, you will copy the hacked DS Connection Settings DSiWare to internal memory, which will temporarily replace it with Flipnote Studio.
|
||||
|
||||
|
|
@ -73,7 +86,7 @@ In this section, you will copy the hacked DS Connection Settings DSiWare to inte
|
|||
1. Navigate to `Internet Settings` -> `Nintendo DS Connections`, then select "OK" ([image](/images/screenshots/fredtool/dsconnection.png))
|
||||
1. 完了した場合、日本語のうごくメモ帳が開きます
|
||||
|
||||
#### Section IV - Flipnote Exploit
|
||||
#### Section V - Flipnote Exploit
|
||||
|
||||
このセクションのビジュアルガイドをご希望の場合は、 [このリンク](https://zoogie.github.io/web/flipnote_directions/) からご利用いただけます。
|
||||
{: .notice--info}
|
||||
|
|
@ -99,7 +112,7 @@ In this section, you will perform a series of very specific steps within Flipnot
|
|||
+ If your device shuts down when you try to power it on, ensure that you have copied `boot.firm` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ If you see the Luma Configuration screen, press (Start) to reboot, then continue with the guide
|
||||
|
||||
#### Section V - Luma3DS Verification
|
||||
#### Section VI - Luma3DS Verification
|
||||
|
||||
Due to the nature of the exploit used, it is occasionally (but rarely) possible for boot9strap to not actually get installed. This section will therefore verify that boot9strap was successfully installed by seeing if some files that are normally automatically generated by Luma3DS were created.
|
||||
|
||||
|
|
@ -113,9 +126,9 @@ At this point, your console will boot to Luma3DS by default.
|
|||
+ Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
|
||||
+ On the next page, you will install useful homebrew applications to complete your setup.
|
||||
|
||||
#### Section VI - Restoring DS Connection Settings
|
||||
#### Section VII - Restoring DS Connection Settings
|
||||
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section III.
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section IV.
|
||||
|
||||
1. SDカードの`Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`へ移動します
|
||||
1. Copy the `42383841.bin` file from the `clean` folder of the downloaded DSiWare archive (output_(name).zip) to the `Nintendo DSiWare` folder, replacing the existing one
|
||||
|
|
|
|||
|
|
@ -18,45 +18,28 @@ title: "boot9strap(USM) の導入"
|
|||
|
||||
これらのガイドは、システムバージョン末尾にある「U、E、J、K」にあるように、米国、欧州、日本、韓国の端末で機能します。
|
||||
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
{: .notice--warning}
|
||||
|
||||
### 必要なもの
|
||||
|
||||
* [Seedminer](seedminer) でダウンロードした `movable.sed` ファイル
|
||||
* The latest release of [SafeB9SInstaller](https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip) (direct download)
|
||||
* The latest release of [boot9strap](https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip) (direct download)
|
||||
* The latest release of [Luma3DS](https://github.com/LumaTeam/Luma3DS/releases/latest) (the Luma3DS `.zip` file)
|
||||
* The latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/download/v1.3/usm.bin) (direct download)
|
||||
|
||||
|
||||
#### セクション I - 準備
|
||||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 and unSAFE_MODE exploits onto your device's SD card.
|
||||
In this section, you will copy the files needed to trigger the unSAFE_MODE exploit onto your device's SD card.
|
||||
|
||||
1. 本体の電源が入っている場合、本体の電源を切ります
|
||||
1. Open [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php) on your computer
|
||||
1. "ファイルを選択"から movable.sed ファイルをアップロードします。
|
||||
1. 「Build and Download」をクリックしてください。
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a SAFE_MODE exploit data file called `usm.bin` inside of a zip archive (`unSAFE_MODE.zip`)
|
||||
1. パソコンにSDカードを入れます
|
||||
1. Your SD card should be inserted in your computer
|
||||
1. `boot.firm` と `boot.3dsx` をLuma3DSの `.zip` からSDカードのルートにコピーします
|
||||
+ SDカードのルートとは、Nintendo 3DSのフォルダなどがある最初の項目のことであり、フォルダの中ではありません。
|
||||
1. `boot9strap`という名前のフォルダをSDカードのルート上に作成します。
|
||||
1. `boot9strap.firm`と`boot9strap.firm.sha`を boot9strap `.zip` ファイルから解凍し、SD カードのboot9strapフォルダにコピーします。
|
||||
1. SafeB9SInstaller `.zip` から`SafeB9SInstaller.bin`をSDカードのルートへコピーします
|
||||
1. Copy `usm.bin` from `unSAFE_MODE.zip` to the root of your SD card
|
||||
![]({{ "/images/screenshots/bb3/usm-root-layout.png" | absolute_url }}){: .notice--info}
|
||||
![]({{ "/images/screenshots/boot9strap-folder.png" | absolute_url }}){: .notice--info}
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `unSAFE_MODE.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
1. Copy `usm.bin` to the root of your SD card
|
||||
|
||||
#### セクション II - BannerBomb3
|
||||
|
||||
|
|
@ -66,9 +49,9 @@ In this section, you will trigger the BannerBomb3 exploit using the DSiWare Mana
|
|||
1. 本体の電源を入れます
|
||||
1. 「本体設定」を開きます。
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-usm-menu)
|
||||
1. Press (A) to select "Inject haxx"
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-usm)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Install unSAFE_MODE"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### セクション III - unSAFE_MODE
|
||||
|
|
@ -77,7 +60,7 @@ In this section, you will enter Safe Mode (a feature available on all 3DS family
|
|||
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of BannerBomb3](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
1. 「OK」を押して更新を承認します
|
||||
+ アップデートはありません。 そういう仕組みになっています
|
||||
1. 「承諾」を押して利用規約に同意します
|
||||
|
|
@ -107,8 +90,7 @@ In this section, you will trigger the BannerBomb3 exploit a second time so that
|
|||
|
||||
1. 「本体設定」を開きます。
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Restore slots"
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Uninstall unSAFE_MODE"
|
||||
+ Your device will automatically reboot
|
||||
1. 本体の電源を切ります。
|
||||
1. パソコンにSDカードを入れます
|
||||
|
|
|
|||
|
|
@ -56,6 +56,7 @@ In this section, you will use the Bruteforce Movable website to retrieve your de
|
|||
+ If you are still waiting after half an hour, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask (in English) for someone there to assist you
|
||||
1. When the process is completed, download your `movable.sed` file from the site
|
||||
+ このファイルは今後必要になるので、保管してください
|
||||
1. 本体の電源を切ります。
|
||||
|
||||
___
|
||||
|
||||
|
|
@ -63,11 +64,11 @@ ___
|
|||
|
||||
Once you have your device's encryption key (`movable.sed`), you will use it in conjunction with other exploits to install custom firmware on your 3DS.
|
||||
|
||||
#### unSAFE_MODE (Recommended)
|
||||
#### BannerBomb3
|
||||
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the SAFE_MODE firmware present in all 3DS units.
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the System Settings application.
|
||||
|
||||
Continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
Continue to [BannerBomb3](bannerbomb3)
|
||||
{: .notice--primary}
|
||||
|
||||
___
|
||||
|
|
|
|||
|
|
@ -126,11 +126,11 @@ If this is unsuccessful, try using another SD card.
|
|||
|
||||
## Installing boot9strap (USM)
|
||||
|
||||
### DSiWare Management menu crashes without showing USM menu
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (USM)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php).
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `usm.bin` is on the root of the SD card. If it is missing, then download the latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/latest) (the RELEASE `.zip` file), and copy the `usm.bin` file to the root of your SD card.
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, you will need to follow [an alternate branch of Seedminer](homebrew-launcher-(pichaxx)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
|
|
@ -144,16 +144,24 @@ If neither of these solutions fixes this problem, then custom firmware may have
|
|||
|
||||
### DSiWare Management shows a question mark
|
||||
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php), ensuring that you use the `movable.sed` file for your console.
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen), ensuring that you use the `movable.sed` file for your console.
|
||||
|
||||
### DSiWare Management menu crashes without purple screen
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
|
||||
---
|
||||
|
||||
## Installing boot9strap (Fredtool)
|
||||
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (Fredtool)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
### Error on Fredtool Injector page
|
||||
|
||||
Ensure that your `movable.sed` and DSiWare backup come from the same console. A mismatch will result in an error.
|
||||
|
|
|
|||
|
|
@ -6,8 +6,8 @@ title: "BannerBomb3"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>To dump system DSiWare, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system in order to dump the DSi Internet Settings application to the SD root.</p>
|
||||
<p>To launch custom code, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system.</p>
|
||||
<p>For a more technical explanation, see <a href="https://github.com/zoogie/Bannerbomb3">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
|
@ -27,38 +27,43 @@ title: "BannerBomb3"
|
|||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 exploit onto your device's SD card.
|
||||
|
||||
1. 컴퓨터에서 [BannerBomb3 Tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php)를 열어 주세요
|
||||
1. "Choose File"를 선택하여 `movable.sed`를 업로드 해 주세요
|
||||
1. "Build and Download"를 선택해 주세요
|
||||
+ 이것은 `F00D43D5.bin`이라는 취약점 DSiWare이 들어 있는 zip 파일 (`BannerBomb3.zip`)을 다운로드 합니다
|
||||
1. 기기의 전원이 켜져 있다면, 전원을 꺼 주세요
|
||||
1. 기기를 종료해 주세요
|
||||
1. SD 카드를 컴퓨터에 삽입해 주세요
|
||||
1. Open [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen) on your computer
|
||||
1. Upload your movable.sed using the “Choose File” option
|
||||
1. Click “Build and Download”
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a payload called `bb3.bin` inside of a zip archive (`DSIWARE_EXPLOIT.zip`)
|
||||
1. Copy `bb3.bin` from `DSIWARE_EXPLOIT.zip` to the root of your SD card
|
||||
+ SD 카드의 루트는 SD 카드를 열 때 보이는 디렉토리이고, Nintendo 3DS 폴더가 보이지만 그 안에 않 들어가 있는 상태의 폴더 입니다
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `BannerBomb3.zip` to the `Nintendo DSiWare` folder
|
||||
1. Copy the `F00D43D5.bin` file from `DSIWARE_EXPLOIT.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### 섹션 II - BannerBomb3
|
||||
#### Section II - Hardware Button Check
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next page.
|
||||
In this section, you will test the SAFE_MODE function of your device. This will determine which method you will follow in the next page.
|
||||
|
||||
1. SD 카드를 기기에 다시 삽입해 주세요
|
||||
1. 기기를 시작해 주세요
|
||||
1. 기기에서 본체 설정을 열어 주세요
|
||||
1. Navigate to `Data Management` -> `DSiWare` -> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ 기기가 마젠타 (분홍/보라)색이 번쩍 하다가 몇 초 후 크래시 할 겁니다. 이것은 재대로 됐다는 뜻 입니다
|
||||
1. 전원이 꺼져 있는 상태에서 (L 어깨) + (R 어깨) + (십자 Up) + (A) 를 길게 눌르고, 누르는 상태에서 전원을 켜 주세요
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
1. If prompted to update, press Cancel
|
||||
+ If the device boots to the HOME Menu, just continue to the next step
|
||||
1. 기기를 종료해 주세요
|
||||
1. SD 카드를 컴퓨터에 삽입해 주세요
|
||||
1. You should now have `42383841.bin` on the root of your SD card. Copy this file to somewhere on your computer, as you will use it on the next page
|
||||
1. SD 카드의 `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` 폴더로 이동해 주세요
|
||||
1. Delete `F00D43D5.bin` from your Nintendo DSiWare folder and from your computer. 더 이상 이 파일은 필요가 없습니다
|
||||
|
||||
___
|
||||
|
||||
[boot9strap 설치 (Fredtool)](installing-boot9strap-(fredtool))로 계속
|
||||
### Next steps: Choose an exploit
|
||||
|
||||
If your device booted into Safe Mode and prompted to you to do a system update in Section II, Safe Mode is working on your device.
|
||||
|
||||
If your device booted into Safe Mode, continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
{: .notice--primary}
|
||||
|
||||
If your device did NOT boot into Safe Mode, continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
{: .notice--warning}
|
||||
|
|
|
|||
|
|
@ -6,14 +6,13 @@ title: "Installing boot9strap (Fredtool)"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application. This requires you to have a DSiWare backup, which you should have gotten in the previous section.</p>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application.</p>
|
||||
<p>This is a currently working implementation of the "FIRM partitions known-plaintext" exploit detailed <a href="https://www.3dbrew.org/wiki/3DS_System_Flaws">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
||||
### 준비물
|
||||
|
||||
* A DSiWare Backup, normally `42383841.bin` (You should have one on the root of your SD card from following [BannerBomb3](bannerbomb3))
|
||||
* [Seedminer](seedminer)에서 받은 `movable.sed` 파일
|
||||
* 최신 버전의 [Frogminer_save](https://github.com/zoogie/Frogminer/releases/latest`) (`Frogminer_save.zip`)
|
||||
* 최신 버전의 [b9sTool](https://github.com/zoogie/b9sTool/releases/latest`) (`boot.nds`)
|
||||
|
|
@ -27,17 +26,32 @@ As an additional safety measure, we will perform an additional check for custom
|
|||
1. (Select) 버튼을 길게 눌러 주세요
|
||||
1. (Select) 버튼을 계속 눌러 있는 상태에서 기기의 전원을 켜 주세요
|
||||
1. 만약 HOME 메뉴가 켜지면, 이 확인은 성공적이고, 가이드를 진행하면 됩니다
|
||||
1. 기기를 종료해 주세요
|
||||
|
||||
만약 설정 메뉴가 보이면, 이 기기는 이미 커스텀 펌웨어가 설치되어 있고, 이 작업을 진행하면 기기가 벽돌 될수가 있습니다! 이미 존재하는 CFW를 업데이트 할 수 있도록 [CFW 확인](checking-for-cfw)를 진행해 주세요.
|
||||
If you see a configuration menu or the console immediately powers off, you already have CFW, and continuing with these instructions may BRICK your device! 이미 존재하는 CFW를 업데이트 할 수 있도록 [CFW 확인](checking-for-cfw)를 진행해 주세요.
|
||||
{: .notice--danger}
|
||||
|
||||
#### 섹션 II - 준비 작업
|
||||
#### 섹션 II - BannerBomb3
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next section.
|
||||
|
||||
1. SD 카드를 기기에 다시 삽입해 주세요
|
||||
1. 기기를 시작해 주세요
|
||||
1. 기기에서 본체 설정을 열어 주세요
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-fredtool)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Dump DSiWare"
|
||||
+ 기기가 자동으로 종료될 겁니다
|
||||
|
||||
#### Section III - Prep Work
|
||||
|
||||
In this section, you will copy the files necessary to temporarily replace DS Connection Settings with Flipnote Studio, which is used to launch the boot9strap (custom firmware) installer.
|
||||
|
||||
1. SD 카드를 컴퓨터에 삽입해 주세요
|
||||
1. Open the [DSIHaxInjector_new](https://jenkins.nelthorya.net/job/DSIHaxInjector_new/build?delay=0sec) website on your computer
|
||||
1. "Username"에 영어/숫자를 사용한 이름을 아무거나 입력해 주세요 (스페이스나 특수 문자는 사용 불가)
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file using the first "Browse..." option
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file from the root of your SD card using the first "Browse..." option
|
||||
1. Under the "MovableSed" field, upload your `movable.sed` file using the second "Browse..." option
|
||||
1. Under the "InjectionTarget" field, set the injection target to `DSinternet` (NOT memorypit)
|
||||
1. Click "Build"
|
||||
|
|
@ -46,7 +60,6 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
1. Click on the first search result
|
||||
+ This result should have the latest timestamp
|
||||
1. Click the "output_(name).zip" link
|
||||
1. SD 카드를 컴퓨터에 삽입해 주세요
|
||||
1. SD 카드의 `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` 폴더로 이동해 주세요
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
|
|
@ -60,7 +73,7 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
![]({{ "/images/screenshots/fredtool-root-layout.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section III - Overwriting DS Connection Settings
|
||||
#### Section IV - Overwriting DS Connection Settings
|
||||
|
||||
In this section, you will copy the hacked DS Connection Settings DSiWare to internal memory, which will temporarily replace it with Flipnote Studio.
|
||||
|
||||
|
|
@ -73,7 +86,7 @@ In this section, you will copy the hacked DS Connection Settings DSiWare to inte
|
|||
1. Navigate to `Internet Settings` -> `Nintendo DS Connections`, then select "OK" ([image](/images/screenshots/fredtool/dsconnection.png))
|
||||
1. 만약 익스플로잇이 성공적이었다면, 기기는 JPN 버전의 Flipnote Studio를 실행할 겁니다
|
||||
|
||||
#### 섹션 IV - Flipnote 익스플로잇
|
||||
#### 섹션 V - Flipnote 익스플로잇
|
||||
|
||||
만약 이 섹션의 비주얼 가이드를 선호한다면, [여기서] (https://zoogie.github.io/web/flipnote_directions/) 그 중 하나를 보실 수가 있습니다.
|
||||
{: .notice--info}
|
||||
|
|
@ -99,7 +112,7 @@ In this section, you will perform a series of very specific steps within Flipnot
|
|||
+ 만약 기기가 부팅시에 꺼진다면 Luma3DS `.zip` 파일 안에 압축 되있는 `boot.firm`을 SD카드의 루트로 복사 했는지 확인하세요
|
||||
+ If you see the Luma Configuration screen, press (Start) to reboot, then continue with the guide
|
||||
|
||||
#### 섹션 V - Luma3DS 검증
|
||||
#### Section VI - Luma3DS Verification
|
||||
|
||||
Due to the nature of the exploit used, it is occasionally (but rarely) possible for boot9strap to not actually get installed. This section will therefore verify that boot9strap was successfully installed by seeing if some files that are normally automatically generated by Luma3DS were created.
|
||||
|
||||
|
|
@ -113,9 +126,9 @@ Due to the nature of the exploit used, it is occasionally (but rarely) possible
|
|||
+ Luma3DS는 보통 HOME 메뉴와 똑같이 보입니다. 만약 기기가 HOME 메뉴로 부팅되었다면, 커스텀 펌웨어가 설치되어 있습니다.
|
||||
+ 다음 페이지에서는 커펌에 유용한 홈브류를 설치해 기기 준비를 완료할 것 입니다.
|
||||
|
||||
#### 섹션 VI - DS 소프트웨어용 설정 복구
|
||||
#### Section VII - Restoring DS Connection Settings
|
||||
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section III.
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section IV.
|
||||
|
||||
1. SD 카드의 `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` 폴더로 이동해 주세요
|
||||
1. Copy the `42383841.bin` file from the `clean` folder of the downloaded DSiWare archive (output_(name).zip) to the `Nintendo DSiWare` folder, replacing the existing one
|
||||
|
|
|
|||
|
|
@ -18,45 +18,28 @@ title: "boot9strap 설치 (USM)"
|
|||
|
||||
이 설명서는 미주, 유럽, 일본, 그리고 한국 지역 기기들 (시스템 버전 다음 글짜가 U, E, J, 아니면 K 인 경우) 와 호환됩니다.
|
||||
|
||||
만약 (L/R 어깨 버튼), (위 십자 패드), 또는 (A) 버튼이 동작되지 않다면, [다른 Seedminer 방법](bannerbomb3)을 따라야 합니다. 이 방법에 도움이 필요하다면, [Discord의 Nintendo Homebrew](https://discord.gg/MWxPgEp)에서 영어로 도움을 요청해 주세요.
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](installing-boot9strap-(fredtool)). 이 방법에 도움이 필요하다면, [Discord의 Nintendo Homebrew](https://discord.gg/MWxPgEp)에서 영어로 도움을 요청해 주세요.
|
||||
{: .notice--warning}
|
||||
|
||||
### 준비물
|
||||
|
||||
* [Seedminer](seedminer)에서 받은 `movable.sed` 파일
|
||||
* 최신 버전의 [SafeB9SInstaller](https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip) (직접 다운로드)
|
||||
* 최신 버전의 [boot9strap](https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip) (직접 다운로드)
|
||||
* 최신 버전의 [Luma3DS](https://github.com/LumaTeam/Luma3DS/releases/latest) (`.zip` 파일)
|
||||
* The latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/download/v1.3/usm.bin) (direct download)
|
||||
|
||||
|
||||
#### 섹션 I - 준비 작업
|
||||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 and unSAFE_MODE exploits onto your device's SD card.
|
||||
In this section, you will copy the files needed to trigger the unSAFE_MODE exploit onto your device's SD card.
|
||||
|
||||
1. 기기의 전원이 켜져 있다면, 전원을 꺼 주세요
|
||||
1. 컴퓨터에서 [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php) 를 열어 주세요
|
||||
1. "Choose File"를 선택하여 `movable.sed`를 업로드 해 주세요
|
||||
1. "Build and Download"를 선택해 주세요
|
||||
+ 이 작업은 `F00D43D5.bin` DSiWare 파일과 `usm.bin` SAFE_MODE 익스플로잇 데이터를 zip 파일로 다운로드 합니다 (`unSAFE_MODE.zip`)
|
||||
1. SD 카드를 컴퓨터에 삽입해 주세요
|
||||
1. Your SD card should be inserted in your computer
|
||||
1. Luma3DS `.zip`안에 있는 `boot.firm`과 `boot.3dsx`를 SD 카드의 루트에 복사해 주세요
|
||||
+ SD 카드의 루트는 SD 카드를 열 때 보이는 디렉토리이고, Nintendo 3DS 폴더가 보이지만 그 안에 않 들어가 있는 상태의 폴더 입니다
|
||||
1. SD 카드이 루트에 `boot9strap` 라는 이름으로 새 폴더를 생성해 주세요
|
||||
1. SD 카드에 있는 `/boot9strap/` 폴더에 boot9strap `.zip` 파일 안에 압축되있는 `boot9strap.firm`과 `boot9strap.firm.sha`을 복사해 주세요
|
||||
1. SafeB9SInstaller `.zip`의 `SafeB9SInstaller.bin`을 SD 카드의 루트로 복사해 주세요
|
||||
1. `unSAFE_MODE.zip` 안에 있는 `usm.bin`을 SD 카드의 루트에 복사해 주세요
|
||||
![]({{ "/images/screenshots/bb3/usm-root-layout.png" | absolute_url }}){: .notice--info}
|
||||
![]({{ "/images/screenshots/boot9strap-folder.png" | absolute_url }}){: .notice--info}
|
||||
1. SD 카드의 `Nintendo 3DS` -> `<ID0>` -> `<ID1>` 폴더로 이동해 주세요
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. `<ID1>` 폴더에 `Nintendo DSiWare` 폴더를 생성해 주세요
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. `F00D43D5.bin` 파일을 `unSAFE_MODE.zip` 에서 `Nintendo DSiWare` 폴더로 복사해 주세요
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
1. Copy `usm.bin` to the root of your SD card
|
||||
|
||||
#### 섹션 II - BannerBomb3
|
||||
|
||||
|
|
@ -66,9 +49,9 @@ In this section, you will trigger the BannerBomb3 exploit using the DSiWare Mana
|
|||
1. 기기를 시작해 주세요
|
||||
1. 기기에서 본체 설정을 열어 주세요
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-usm-menu)
|
||||
1. Press (A) to select "Inject haxx"
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-usm)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Install unSAFE_MODE"
|
||||
+ 기기가 자동으로 종료될 겁니다
|
||||
|
||||
#### 섹션 III - unSAFE_MODE
|
||||
|
|
@ -77,7 +60,7 @@ In this section, you will enter Safe Mode (a feature available on all 3DS family
|
|||
|
||||
1. 전원이 꺼져 있는 상태에서 (L 어깨) + (R 어깨) + (십자 Up) + (A) 를 길게 눌르고, 누르는 상태에서 전원을 켜 주세요
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of Seedminer](bannerbomb3). 이 방법에 도움이 필요하다면, [Discord의 Nintendo Homebrew](https://discord.gg/MWxPgEp)에서 영어로 도움을 요청해 주세요.
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of BannerBomb3](installing-boot9strap-(fredtool)). 이 방법에 도움이 필요하다면, [Discord의 Nintendo Homebrew](https://discord.gg/MWxPgEp)에서 영어로 도움을 요청해 주세요.
|
||||
1. "OK"를 선택해서 업데이트를 확인해 주세요
|
||||
+ 실제로 업데이트를 하는 것은 아닙니다. 이것은 익스플로잇의 일부입니다
|
||||
1. "동의함"를 눌러서 이용 약관에 동의해 주세요
|
||||
|
|
@ -107,8 +90,7 @@ In this section, you will trigger the BannerBomb3 exploit a second time so that
|
|||
|
||||
1. 기기에서 본체 설정을 열어 주세요
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Restore slots"
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Uninstall unSAFE_MODE"
|
||||
+ 기기가 자동으로 재부팅될 겁니다
|
||||
1. 기기를 종료해 주세요
|
||||
1. SD 카드를 컴퓨터에 삽입해 주세요
|
||||
|
|
|
|||
|
|
@ -56,6 +56,7 @@ In this section, you will use the Bruteforce Movable website to retrieve your de
|
|||
+ 만약 30분이 지나서도 완료가 안된다면, [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp)에서 영어로 물어보세요. "Bruteforce Movable is not working. Could someone help me?"정도 질문이 적당할 것 입니다
|
||||
1. 과정이 끝나면, `movable.sed` 파일을 다운로드 해 주세요
|
||||
+ 이 파일은 나중에도 사용되니 일단 보관해 두세요
|
||||
1. 기기를 종료해 주세요
|
||||
|
||||
___
|
||||
|
||||
|
|
@ -63,11 +64,11 @@ ___
|
|||
|
||||
기기의 암호화 키 (`movable.sed`)를 구한 후, 이것을 다른 익스플로잇하고 함깨 사용해 커스텀 펌웨어를 설치할 것 입니다.
|
||||
|
||||
#### unSAFE_MODE (추천)
|
||||
#### BannerBomb3
|
||||
|
||||
더 깊은 모딩을 위한 Seedminer의 이 사용법은, 모든 3DS 기기에 존제하는 SAFE_MODE 펌웨어의 익스플로잇을 사용하는 방식입니다.
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the System Settings application.
|
||||
|
||||
[boot9strap 설치 (USM)](installing-boot9strap-(usm))로 계속합니다
|
||||
Continue to [BannerBomb3](bannerbomb3)
|
||||
{: .notice--primary}
|
||||
|
||||
___
|
||||
|
|
|
|||
|
|
@ -126,11 +126,11 @@ If this is unsuccessful, try using another SD card.
|
|||
|
||||
## boot9strap 설치 (USM)
|
||||
|
||||
### DSiWare Management menu crashes without showing USM menu
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (USM)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php).
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `usm.bin` is on the root of the SD card. If it is missing, then download the latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/latest) (the RELEASE `.zip` file), and copy the `usm.bin` file to the root of your SD card.
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, you will need to follow [an alternate branch of Seedminer](homebrew-launcher-(pichaxx)). 이 방법에 도움이 필요하다면, [Discord의 Nintendo Homebrew](https://discord.gg/MWxPgEp)에서 영어로 도움을 요청해 주세요.
|
||||
|
||||
|
|
@ -144,16 +144,24 @@ If neither of these solutions fixes this problem, then custom firmware may have
|
|||
|
||||
### DSiWare Management shows a question mark
|
||||
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php), ensuring that you use the `movable.sed` file for your console.
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen), ensuring that you use the `movable.sed` file for your console.
|
||||
|
||||
### DSiWare Management menu crashes without purple screen
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
|
||||
---
|
||||
|
||||
## boot9strap 설치 (Fredtool)
|
||||
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (Fredtool)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
### Error on Fredtool Injector page
|
||||
|
||||
Ensure that your `movable.sed` and DSiWare backup come from the same console. A mismatch will result in an error.
|
||||
|
|
|
|||
|
|
@ -6,8 +6,8 @@ title: "BannerBomb3"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>To dump system DSiWare, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system in order to dump the DSi Internet Settings application to the SD root.</p>
|
||||
<p>To launch custom code, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system.</p>
|
||||
<p>For a more technical explanation, see <a href="https://github.com/zoogie/Bannerbomb3">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
|
@ -27,38 +27,43 @@ If you have a Taiwanese console (indicated by a T after the system version), fol
|
|||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 exploit onto your device's SD card.
|
||||
|
||||
1. Open [BannerBomb3 Tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php) on your computer
|
||||
1. Upload your movable.sed using the "Choose File" option
|
||||
1. Click "Build and Download"
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` inside of a zip file (`BannerBomb3.zip`)
|
||||
1. If your console is powered on, power off your console
|
||||
1. Power off your device
|
||||
1. Pasang kad SD anda ke dalam komputer
|
||||
1. Open [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen) on your computer
|
||||
1. Upload your movable.sed using the “Choose File” option
|
||||
1. Click “Build and Download”
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a payload called `bb3.bin` inside of a zip archive (`DSIWARE_EXPLOIT.zip`)
|
||||
1. Copy `bb3.bin` from `DSIWARE_EXPLOIT.zip` to the root of your SD card
|
||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `BannerBomb3.zip` to the `Nintendo DSiWare` folder
|
||||
1. Copy the `F00D43D5.bin` file from `DSIWARE_EXPLOIT.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
#### Section II - Hardware Button Check
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next page.
|
||||
In this section, you will test the SAFE_MODE function of your device. This will determine which method you will follow in the next page.
|
||||
|
||||
1. Reinsert your SD card into your device
|
||||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare` -> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your system should flash Magenta (pink/purple) and then crash a few seconds later. This means it worked
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
1. If prompted to update, press Cancel
|
||||
+ If the device boots to the HOME Menu, just continue to the next step
|
||||
1. Power off your device
|
||||
1. Pasang kad SD anda ke dalam komputer
|
||||
1. You should now have `42383841.bin` on the root of your SD card. Copy this file to somewhere on your computer, as you will use it on the next page
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
1. Delete `F00D43D5.bin` from your Nintendo DSiWare folder and from your computer. This file will not be needed anymore
|
||||
|
||||
___
|
||||
|
||||
Continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
### Next steps: Choose an exploit
|
||||
|
||||
If your device booted into Safe Mode and prompted to you to do a system update in Section II, Safe Mode is working on your device.
|
||||
|
||||
If your device booted into Safe Mode, continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
{: .notice--primary}
|
||||
|
||||
If your device did NOT boot into Safe Mode, continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
{: .notice--warning}
|
||||
|
|
|
|||
|
|
@ -6,14 +6,13 @@ title: "Installing boot9strap (Fredtool)"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application. This requires you to have a DSiWare backup, which you should have gotten in the previous section.</p>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application.</p>
|
||||
<p>This is a currently working implementation of the "FIRM partitions known-plaintext" exploit detailed <a href="https://www.3dbrew.org/wiki/3DS_System_Flaws">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
||||
### What You Need
|
||||
|
||||
* A DSiWare Backup, normally `42383841.bin` (You should have one on the root of your SD card from following [BannerBomb3](bannerbomb3))
|
||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||
* The latest release of [Frogminer_save](https://github.com/zoogie/Frogminer/releases/latest) (`Frogminer_save.zip`)
|
||||
* The latest release of [b9sTool](https://github.com/zoogie/b9sTool/releases/latest) (`boot.nds`)
|
||||
|
|
@ -27,17 +26,32 @@ As an additional safety measure, we will perform an additional check for custom
|
|||
1. Hold the (Select) button
|
||||
1. Power on your device while still holding the (Select) button
|
||||
1. If the check was successful, you will boot to the HOME Menu and you may proceed with this guide
|
||||
1. Power off your device
|
||||
|
||||
If you see a configuration menu, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
If you see a configuration menu or the console immediately powers off, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
{: .notice--danger}
|
||||
|
||||
#### Section II - Prep Work
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next section.
|
||||
|
||||
1. Reinsert your SD card into your device
|
||||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-fredtool)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Dump DSiWare"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - Prep Work
|
||||
|
||||
In this section, you will copy the files necessary to temporarily replace DS Connection Settings with Flipnote Studio, which is used to launch the boot9strap (custom firmware) installer.
|
||||
|
||||
1. Pasang kad SD anda ke dalam komputer
|
||||
1. Open the [DSIHaxInjector_new](https://jenkins.nelthorya.net/job/DSIHaxInjector_new/build?delay=0sec) website on your computer
|
||||
1. Under the "Username" field, enter any alphanumeric name (no spaces or special characters)
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file using the first "Browse..." option
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file from the root of your SD card using the first "Browse..." option
|
||||
1. Under the "MovableSed" field, upload your `movable.sed` file using the second "Browse..." option
|
||||
1. Under the "InjectionTarget" field, set the injection target to `DSinternet` (NOT memorypit)
|
||||
1. Click "Build"
|
||||
|
|
@ -46,7 +60,6 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
1. Click on the first search result
|
||||
+ This result should have the latest timestamp
|
||||
1. Click the "output_(name).zip" link
|
||||
1. Pasang kad SD anda ke dalam komputer
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
|
|
@ -60,7 +73,7 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
![]({{ "/images/screenshots/fredtool-root-layout.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section III - Overwriting DS Connection Settings
|
||||
#### Section IV - Overwriting DS Connection Settings
|
||||
|
||||
In this section, you will copy the hacked DS Connection Settings DSiWare to internal memory, which will temporarily replace it with Flipnote Studio.
|
||||
|
||||
|
|
@ -73,7 +86,7 @@ In this section, you will copy the hacked DS Connection Settings DSiWare to inte
|
|||
1. Navigate to `Internet Settings` -> `Nintendo DS Connections`, then select "OK" ([image](/images/screenshots/fredtool/dsconnection.png))
|
||||
1. If the exploit was successful, your device will have loaded the JPN version of Flipnote Studio
|
||||
|
||||
#### Section IV - Flipnote Exploit
|
||||
#### Section V - Flipnote Exploit
|
||||
|
||||
If you would prefer a visual guide to this section, one is available [here](https://zoogie.github.io/web/flipnote_directions/).
|
||||
{: .notice--info}
|
||||
|
|
@ -99,7 +112,7 @@ In this section, you will perform a series of very specific steps within Flipnot
|
|||
+ If your device shuts down when you try to power it on, ensure that you have copied `boot.firm` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ If you see the Luma Configuration screen, press (Start) to reboot, then continue with the guide
|
||||
|
||||
#### Section V - Luma3DS Verification
|
||||
#### Section VI - Luma3DS Verification
|
||||
|
||||
Due to the nature of the exploit used, it is occasionally (but rarely) possible for boot9strap to not actually get installed. This section will therefore verify that boot9strap was successfully installed by seeing if some files that are normally automatically generated by Luma3DS were created.
|
||||
|
||||
|
|
@ -113,9 +126,9 @@ At this point, your console will boot to Luma3DS by default.
|
|||
+ Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
|
||||
+ On the next page, you will install useful homebrew applications to complete your setup.
|
||||
|
||||
#### Section VI - Restoring DS Connection Settings
|
||||
#### Section VII - Restoring DS Connection Settings
|
||||
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section III.
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section IV.
|
||||
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
1. Copy the `42383841.bin` file from the `clean` folder of the downloaded DSiWare archive (output_(name).zip) to the `Nintendo DSiWare` folder, replacing the existing one
|
||||
|
|
|
|||
|
|
@ -18,45 +18,28 @@ title: "Installing boot9strap (USM)"
|
|||
|
||||
These instructions work on USA, Europe, Japan, and Korea region consoles as indicated by the letters U, E, J, or K after the system version.
|
||||
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
{: .notice--warning}
|
||||
|
||||
### What You Need
|
||||
|
||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||
* The latest release of [SafeB9SInstaller](https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip) (direct download)
|
||||
* The latest release of [boot9strap](https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip) (direct download)
|
||||
* The latest release of [Luma3DS](https://github.com/LumaTeam/Luma3DS/releases/latest) (the Luma3DS `.zip` file)
|
||||
* The latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/download/v1.3/usm.bin) (direct download)
|
||||
|
||||
|
||||
#### Section I - Prep Work
|
||||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 and unSAFE_MODE exploits onto your device's SD card.
|
||||
In this section, you will copy the files needed to trigger the unSAFE_MODE exploit onto your device's SD card.
|
||||
|
||||
1. If your device is powered on, power off your device
|
||||
1. Open [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php) on your computer
|
||||
1. Upload your movable.sed using the "Choose File" option
|
||||
1. Click "Build and Download"
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a SAFE_MODE exploit data file called `usm.bin` inside of a zip archive (`unSAFE_MODE.zip`)
|
||||
1. Pasang kad SD anda ke dalam komputer
|
||||
1. Your SD card should be inserted in your computer
|
||||
1. Copy `boot.firm` and `boot.3dsx` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||
1. Create a folder named `boot9strap` on the root of your SD card
|
||||
1. Copy `boot9strap.firm` and `boot9strap.firm.sha` from the boot9strap `.zip` to the `/boot9strap/` folder on your SD card
|
||||
1. Copy `SafeB9SInstaller.bin` from the SafeB9SInstaller `.zip` to the root of your SD card
|
||||
1. Copy `usm.bin` from `unSAFE_MODE.zip` to the root of your SD card
|
||||
![]({{ "/images/screenshots/bb3/usm-root-layout.png" | absolute_url }}){: .notice--info}
|
||||
![]({{ "/images/screenshots/boot9strap-folder.png" | absolute_url }}){: .notice--info}
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `unSAFE_MODE.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
1. Copy `usm.bin` to the root of your SD card
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
|
|
@ -66,9 +49,9 @@ In this section, you will trigger the BannerBomb3 exploit using the DSiWare Mana
|
|||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-usm-menu)
|
||||
1. Press (A) to select "Inject haxx"
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-usm)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Install unSAFE_MODE"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - unSAFE_MODE
|
||||
|
|
@ -77,7 +60,7 @@ In this section, you will enter Safe Mode (a feature available on all 3DS family
|
|||
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of BannerBomb3](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
1. Press "OK" to accept the update
|
||||
+ There is no update. This is part of the exploit
|
||||
1. Press "I accept" to accept the terms and conditions
|
||||
|
|
@ -107,8 +90,7 @@ In this section, you will trigger the BannerBomb3 exploit a second time so that
|
|||
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Restore slots"
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Uninstall unSAFE_MODE"
|
||||
+ Your device will automatically reboot
|
||||
1. Power off your device
|
||||
1. Pasang kad SD anda ke dalam komputer
|
||||
|
|
|
|||
|
|
@ -56,6 +56,7 @@ In this section, you will use the Bruteforce Movable website to retrieve your de
|
|||
+ If you are still waiting after half an hour, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask (in English) for someone there to assist you
|
||||
1. When the process is completed, download your `movable.sed` file from the site
|
||||
+ Keep this file as you will need it in the upcoming pages
|
||||
1. Power off your device
|
||||
|
||||
___
|
||||
|
||||
|
|
@ -63,11 +64,11 @@ ___
|
|||
|
||||
Once you have your device's encryption key (`movable.sed`), you will use it in conjunction with other exploits to install custom firmware on your 3DS.
|
||||
|
||||
#### unSAFE_MODE (Recommended)
|
||||
#### BannerBomb3
|
||||
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the SAFE_MODE firmware present in all 3DS units.
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the System Settings application.
|
||||
|
||||
Continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
Continue to [BannerBomb3](bannerbomb3)
|
||||
{: .notice--primary}
|
||||
|
||||
___
|
||||
|
|
|
|||
|
|
@ -126,11 +126,11 @@ If this is unsuccessful, try using another SD card.
|
|||
|
||||
## Installing boot9strap (USM)
|
||||
|
||||
### DSiWare Management menu crashes without showing USM menu
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (USM)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php).
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `usm.bin` is on the root of the SD card. If it is missing, then download the latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/latest) (the RELEASE `.zip` file), and copy the `usm.bin` file to the root of your SD card.
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, you will need to follow [an alternate branch of Seedminer](homebrew-launcher-(pichaxx)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
|
|
@ -144,16 +144,24 @@ If neither of these solutions fixes this problem, then custom firmware may have
|
|||
|
||||
### DSiWare Management shows a question mark
|
||||
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php), ensuring that you use the `movable.sed` file for your console.
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen), ensuring that you use the `movable.sed` file for your console.
|
||||
|
||||
### DSiWare Management menu crashes without purple screen
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
|
||||
---
|
||||
|
||||
## Installing boot9strap (Fredtool)
|
||||
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (Fredtool)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
### Error on Fredtool Injector page
|
||||
|
||||
Ensure that your `movable.sed` and DSiWare backup come from the same console. A mismatch will result in an error.
|
||||
|
|
|
|||
|
|
@ -6,8 +6,8 @@ title: "BannerBomb3"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>To dump system DSiWare, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system in order to dump the DSi Internet Settings application to the SD root.</p>
|
||||
<p>To launch custom code, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system.</p>
|
||||
<p>For a more technical explanation, see <a href="https://github.com/zoogie/Bannerbomb3">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
|
@ -27,38 +27,43 @@ Als je een Taiwanese console hebt (aangegeven door een T na de systeemversie), v
|
|||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 exploit onto your device's SD card.
|
||||
|
||||
1. Open [BannerBomb3 Tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php) op je computer
|
||||
1. Upload je movable.sed met de "Choose File" optie
|
||||
1. Selecteer "Build and Download"
|
||||
+ Dit gaat een geëxploiteerde DSiWare titel genaamd `F00D43D5.bin` in een zip bestand (`BannerBomb3.zip`) downloaden
|
||||
1. Als je console aanstaat, zet hem dan uit
|
||||
1. Schakel je 3DS uit
|
||||
1. Plaats je SD-kaart in je computer
|
||||
1. Open [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen) on your computer
|
||||
1. Upload your movable.sed using the “Choose File” option
|
||||
1. Click “Build and Download”
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a payload called `bb3.bin` inside of a zip archive (`DSIWARE_EXPLOIT.zip`)
|
||||
1. Copy `bb3.bin` from `DSIWARE_EXPLOIT.zip` to the root of your SD card
|
||||
+ De hoofdmap van de SD-kaart verwijst naar de bovenste map van de SD-kaart, waarin je alle mappen op de SD-kaart kunt zien, waaronder de Nintendo 3DS map, zonder je in de Nintendo 3DS map te bevinden
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `BannerBomb3.zip` to the `Nintendo DSiWare` folder
|
||||
1. Copy the `F00D43D5.bin` file from `DSIWARE_EXPLOIT.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Deel II - BannerBomb3
|
||||
#### Section II - Hardware Button Check
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next page.
|
||||
In this section, you will test the SAFE_MODE function of your device. This will determine which method you will follow in the next page.
|
||||
|
||||
1. Stop je SD-kaart terug in je 3DS
|
||||
1. Zet je 3DS aan
|
||||
1. Open Systeem Instellingen op je 3DS
|
||||
1. Navigate to `Data Management` -> `DSiWare` -> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Je 3DS zou Magenta (roze/paars) moeten flashen en vervolgens een paar seconden later moeten crashen. Dit betekent dat het heeft gewerkt
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
1. If prompted to update, press Cancel
|
||||
+ If the device boots to the HOME Menu, just continue to the next step
|
||||
1. Schakel je 3DS uit
|
||||
1. Plaats je SD kaart in je computer
|
||||
1. You should now have `42383841.bin` on the root of your SD card. Copy this file to somewhere on your computer, as you will use it on the next page
|
||||
1. Navigeer naar `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` op je SD-kaart
|
||||
1. Delete `F00D43D5.bin` from your Nintendo DSiWare folder and from your computer. Dit bestand is niet meer nodig
|
||||
|
||||
___
|
||||
|
||||
Ga door met [boot9strap installeren (Fredtool)](installing-boot9strap-(fredtool))
|
||||
### Next steps: Choose an exploit
|
||||
|
||||
If your device booted into Safe Mode and prompted to you to do a system update in Section II, Safe Mode is working on your device.
|
||||
|
||||
If your device booted into Safe Mode, continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
{: .notice--primary}
|
||||
|
||||
If your device did NOT boot into Safe Mode, continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
{: .notice--warning}
|
||||
|
|
|
|||
|
|
@ -6,14 +6,13 @@ title: "Installing boot9strap (Fredtool)"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application. This requires you to have a DSiWare backup, which you should have gotten in the previous section.</p>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application.</p>
|
||||
<p>This is a currently working implementation of the "FIRM partitions known-plaintext" exploit detailed <a href="https://www.3dbrew.org/wiki/3DS_System_Flaws">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
||||
### Wat je nodig hebt
|
||||
|
||||
* A DSiWare Backup, normally `42383841.bin` (You should have one on the root of your SD card from following [BannerBomb3](bannerbomb3))
|
||||
* je `movable.sed` bestand van het voltooien van [Seedminer](seedminer)
|
||||
* De nieuwste versie van [Frogminer_save](https://github.com/zoogie/Frogminer/releases/latest) (`Frogminer_save.zip`)
|
||||
* De nieuwste versie van [b9sTool](https://github.com/zoogie/b9sTool/releases/latest) (`boot.nds`)
|
||||
|
|
@ -27,17 +26,32 @@ As an additional safety measure, we will perform an additional check for custom
|
|||
1. Houd de (Select) knop ingedrukt
|
||||
1. Zet je 3DS aan terwijl je de (Select) knop ingedrukt houdt
|
||||
1. Als de check succesvol was, zul je opstarten naar het HOME Menu en kun je doorgaan met deze handleiding
|
||||
1. Schakel je 3DS uit
|
||||
|
||||
Als je een configuratiemenu ziet, heb je al CFW en zal het doorgaan met deze instructies je apparaat BRICKEN! Volg [Controleren op CFW](checking-for-cfw) om je bestaande CFW te upgraden.
|
||||
If you see a configuration menu or the console immediately powers off, you already have CFW, and continuing with these instructions may BRICK your device! Volg [Controleren op CFW](checking-for-cfw) om je bestaande CFW te upgraden.
|
||||
{: .notice--danger}
|
||||
|
||||
#### Deel II - Voorbereiding
|
||||
#### Deel II - BannerBomb3
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next section.
|
||||
|
||||
1. Stop je SD kaart terug in je 3DS
|
||||
1. Zet je 3DS aan
|
||||
1. Open System Settings op je apparaat
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-fredtool)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Dump DSiWare"
|
||||
+ Je apparaat zal automatisch uitschakelen
|
||||
|
||||
#### Section III - Prep Work
|
||||
|
||||
In this section, you will copy the files necessary to temporarily replace DS Connection Settings with Flipnote Studio, which is used to launch the boot9strap (custom firmware) installer.
|
||||
|
||||
1. Plaats je SD kaart in je computer
|
||||
1. Open de [DSIHaxInjector_new](https://jenkins.nelthorya.net/job/DSIHaxInjector_new/build?delay=0sec) website op je computer
|
||||
1. Voer een alfanumerieke naam in onder het "Username" veld (geen spaties of speciale tekens)
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file using the first "Browse..." option
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file from the root of your SD card using the first "Browse..." option
|
||||
1. Onder het veld "MovableSed", upload je `movable.sed` bestand met behulp van de tweede "Browse..." optie
|
||||
1. Under the "InjectionTarget" field, set the injection target to `DSinternet` (NOT memorypit)
|
||||
1. Klik op "Build"
|
||||
|
|
@ -46,7 +60,6 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
1. Click on the first search result
|
||||
+ This result should have the latest timestamp
|
||||
1. Klik op de "output_(name).zip" link
|
||||
1. Plaats je SD kaart in je computer
|
||||
1. Navigeer naar `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` op je SD-kaart
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
|
|
@ -60,7 +73,7 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
![]({{ "/images/screenshots/fredtool-root-layout.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section III - Overwriting DS Connection Settings
|
||||
#### Section IV - Overwriting DS Connection Settings
|
||||
|
||||
In this section, you will copy the hacked DS Connection Settings DSiWare to internal memory, which will temporarily replace it with Flipnote Studio.
|
||||
|
||||
|
|
@ -73,7 +86,7 @@ In this section, you will copy the hacked DS Connection Settings DSiWare to inte
|
|||
1. Navigate to `Internet Settings` -> `Nintendo DS Connections`, then select "OK" ([image](/images/screenshots/fredtool/dsconnection.png))
|
||||
1. Als de exploit successful was, zal jouw 3DS de JPN versie van Flipnote Studio hebben opgestart
|
||||
|
||||
#### Deel IV - Flipnote Exploit
|
||||
#### Deel V - Flipnote Exploit
|
||||
|
||||
Als je liever een visuele handleiding hebt in dit deel, is er [hier](https://zoogie.github.io/web/flipnote_directions/) een te vinden.
|
||||
{: .notice--info}
|
||||
|
|
@ -99,7 +112,7 @@ In this section, you will perform a series of very specific steps within Flipnot
|
|||
+ Als je apparaat afsluit als je het probeert aan te zetten, zorg er dan voor dat je `boot.firm` hebt gekopieerd van de Luma3DS `.zip` naar de hoofdmap van je SD-kaart
|
||||
+ Als je het Luma configuratiescherm ziet, druk op (Start) om opnieuw op te starten en ga dan verder met de handleiding
|
||||
|
||||
#### Deel V - Luma3DS verificatie
|
||||
#### Deel VI - Luma3DS verificatie
|
||||
|
||||
Due to the nature of the exploit used, it is occasionally (but rarely) possible for boot9strap to not actually get installed. This section will therefore verify that boot9strap was successfully installed by seeing if some files that are normally automatically generated by Luma3DS were created.
|
||||
|
||||
|
|
@ -113,9 +126,9 @@ Op dit moment zal je console standaard opstarten naar Luma3DS.
|
|||
+ Luma3DS ziet er niet anders uit dan het normale HOME Menu. Als je console in het HOME Menu is opgestart, gebruikt hij custom firmware.
|
||||
+ Op de volgende pagina zal je handige homebrew applicaties installeren om je installatie te voltooien.
|
||||
|
||||
#### Deel VI - DS Connection Settings herstellen
|
||||
#### Section VII - Restoring DS Connection Settings
|
||||
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section III.
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section IV.
|
||||
|
||||
1. Navigeer naar `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` op je SD-kaart
|
||||
1. Copy the `42383841.bin` file from the `clean` folder of the downloaded DSiWare archive (output_(name).zip) to the `Nintendo DSiWare` folder, replacing the existing one
|
||||
|
|
|
|||
|
|
@ -18,45 +18,28 @@ title: "Boot9strap installeren (USM)"
|
|||
|
||||
Deze instructies werken aan de consoles van de VS, Europa, Japan en Korea zoals aangegeven in de letters U, E, J, of K na de systeemversie.
|
||||
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
{: .notice--warning}
|
||||
|
||||
### Wat je nodig hebt
|
||||
|
||||
* je `movable.sed` bestand van het voltooien van [Seedminer](seedminer)
|
||||
* De nieuwste versie van [SafeB9SInstaller](https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip) (directe download)
|
||||
* De nieuwste versie van [boot9strap](https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip) (directe download)
|
||||
* De nieuwste versie van [Luma3DS](https://github.com/LumaTeam/Luma3DS/releases/latest) (het Luma3DS `.zip` bestand)
|
||||
* The latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/download/v1.3/usm.bin) (direct download)
|
||||
|
||||
|
||||
#### Deel I - Voorbereiding
|
||||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 and unSAFE_MODE exploits onto your device's SD card.
|
||||
In this section, you will copy the files needed to trigger the unSAFE_MODE exploit onto your device's SD card.
|
||||
|
||||
1. Als je 3DS aanstaat, zet hem dan af
|
||||
1. Open [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php) op je computer
|
||||
1. Upload je movable.sed met de "Choose File" optie
|
||||
1. Selecteer "Build and Download"
|
||||
+ Dit zal een exploit DSiWare `F00D43D5.bin` en een SAFE_MODE exploit data bestand genaamd `usm.bin` in een zip-archief (`unSAFE_MODE.zip`) downloaden
|
||||
1. Plaats je SD kaart in je computer
|
||||
1. Your SD card should be inserted in your computer
|
||||
1. Kopieer `boot.firm` en `boot.3dsx` van de Luma3DS `.zip` naar de hoofdmap van je SD-kaart
|
||||
+ De hoofdmap van de SD-kaart verwijst naar de bovenste map van de SD-kaart, waarin je alle mappen op de SD-kaart kunt zien, waaronder de Nintendo 3DS map, zonder je in de Nintendo 3DS map te bevinden
|
||||
1. Maak een map genaamd `boot9strap` op de hoofdmap van je SD-kaart
|
||||
1. Kopieer `boot9strap.firm` en `boot9strap.firm.sha` van de boot9strap `.zip` naar de `/boot9strap/` map op je SD-kaart
|
||||
1. Kopieer `SafeB9SInstaller.bin` van de SafeB9SInstaller `.zip` naar de hoofdmap van je SD-kaart
|
||||
1. Kopieer `usm.bin` van de `unSAFE_MODE.zip` naar de hoofdmap van je SD-kaart
|
||||
![]({{ "/images/screenshots/bb3/usm-root-layout.png" | absolute_url }}){: .notice--info}
|
||||
![]({{ "/images/screenshots/boot9strap-folder.png" | absolute_url }}){: .notice--info}
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Kopieer het `F00D43D5.bin` bestand van `unSAFE_MODE.zip` naar de `Nintendo DSiWare` map
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
1. Copy `usm.bin` to the root of your SD card
|
||||
|
||||
#### Deel II - BannerBomb3
|
||||
|
||||
|
|
@ -66,9 +49,9 @@ In this section, you will trigger the BannerBomb3 exploit using the DSiWare Mana
|
|||
1. Zet je 3DS aan
|
||||
1. Open Systeeminstellingen op je apparaat
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-usm-menu)
|
||||
1. Press (A) to select "Inject haxx"
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-usm)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Install unSAFE_MODE"
|
||||
+ Je apparaat zal automatisch uitschakelen
|
||||
|
||||
#### Deel III - unSAFE_MODE
|
||||
|
|
@ -77,7 +60,7 @@ In this section, you will enter Safe Mode (a feature available on all 3DS family
|
|||
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of BannerBomb3](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
1. Druk op "OK" om de update te accepteren
|
||||
+ Er is geen update. Dit is deel van de exploit
|
||||
1. Druk op "I accept" om de algemene voorwaarden te accepteren
|
||||
|
|
@ -107,8 +90,7 @@ In this section, you will trigger the BannerBomb3 exploit a second time so that
|
|||
|
||||
1. Open System Settings op je apparaat
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Restore slots"
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Uninstall unSAFE_MODE"
|
||||
+ Your device will automatically reboot
|
||||
1. Schakel je 3DS uit
|
||||
1. Plaats je SD kaart in je computer
|
||||
|
|
|
|||
|
|
@ -56,6 +56,7 @@ In this section, you will use the Bruteforce Movable website to retrieve your de
|
|||
+ If you are still waiting after half an hour, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask (in English) for someone there to assist you
|
||||
1. When the process is completed, download your `movable.sed` file from the site
|
||||
+ Bewaar dit bestand omdat je het nodig hebt op de komende pagina's
|
||||
1. Schakel je 3DS uit
|
||||
|
||||
___
|
||||
|
||||
|
|
@ -63,11 +64,11 @@ ___
|
|||
|
||||
Zodra je de encryptiesleutel (`movable.sed`) hebt, zal je deze gebruiken in combinatie met andere exploits om custom firmware te installeren op je 3DS.
|
||||
|
||||
#### unSAFE_MODE (Recommended)
|
||||
#### BannerBomb3
|
||||
|
||||
Deze methode om Seedminer te gebruiken voor verdere exploitatie maakt gebruik van je `movable.sed` bestand om te profiteren van exploits in de SAFE_MODE firmware aanwezig in alle 3DS consoles.
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the System Settings application.
|
||||
|
||||
Ga verder naar [boot9strap installeren (USM)](installing-boot9strap-(usm))
|
||||
Continue to [BannerBomb3](bannerbomb3)
|
||||
{: .notice--primary}
|
||||
|
||||
___
|
||||
|
|
|
|||
|
|
@ -126,11 +126,11 @@ Mocht dit niet lukken, gebruik dan een andere SD-kaart.
|
|||
|
||||
## Boot9strap installeren (USM)
|
||||
|
||||
### DSiWare Management menu crasht zonder het USM menu te tonen
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (USM)
|
||||
|
||||
Zorg ervoor dat `F00D43D5.bin` het enige bestand in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` is. Als dat zo is, maak het opnieuw aan met de [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php).
|
||||
Zorg ervoor dat `F00D43D5.bin` het enige bestand in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` is. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `usm.bin` is on the root of the SD card. If it is missing, then download the latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/latest) (the RELEASE `.zip` file), and copy the `usm.bin` file to the root of your SD card.
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, you will need to follow [an alternate branch of Seedminer](homebrew-launcher-(pichaxx)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
|
|
@ -144,16 +144,24 @@ If neither of these solutions fixes this problem, then custom firmware may have
|
|||
|
||||
### DSiWare Management toont een vraagteken
|
||||
|
||||
Er kan een probleem zijn met je `F00D43D5.bin` bestand (het kan beschadigd zijn of bedoeld voor een andere 3DS). Maak je `F00D43D5.bin` bestand opnieuw aan met de [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php), om ervoor te zorgen dat je het `movable.sed` bestand voor je console gebruikt.
|
||||
Er kan een probleem zijn met je `F00D43D5.bin` bestand (het kan beschadigd zijn of bedoeld voor een andere 3DS). Re-create your `F00D43D5.bin` file with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen), ensuring that you use the `movable.sed` file for your console.
|
||||
|
||||
### DSiWare Management menu crasht zonder paars scherm
|
||||
|
||||
Zorg ervoor dat `F00D43D5.bin` het enige bestand in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` is. Als dat zo is, maak het opnieuw aan met de [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php). Als dit niet lukt, kan het zijn dat custom firmware op dit apparaat is gedeïnstalleerd op een manier die deze methode niet uitvoerbaar maakt. Als dit het geval is, neem dan deel aan [Nintendo Homebrew op Discord](https://discord.gg/MWxPgEp) voor hulp.
|
||||
Zorg ervoor dat `F00D43D5.bin` het enige bestand in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` is. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen). Als dit niet lukt, kan het zijn dat custom firmware op dit apparaat is gedeïnstalleerd op een manier die deze methode niet uitvoerbaar maakt. Als dit het geval is, neem dan deel aan [Nintendo Homebrew op Discord](https://discord.gg/MWxPgEp) voor hulp.
|
||||
|
||||
---
|
||||
|
||||
## Boot9strap installeren (Fredtool)
|
||||
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (Fredtool)
|
||||
|
||||
Zorg ervoor dat `F00D43D5.bin` het enige bestand in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` is. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
### Error op de Fredtool Injector pagina
|
||||
|
||||
Zorg ervoor dat je `movable.sed` en DSiWare back-up van dezelfde console komen. Een mismatch resulteert in een error.
|
||||
|
|
|
|||
|
|
@ -6,8 +6,8 @@ title: "BannerBomb3"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>To dump system DSiWare, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system in order to dump the DSi Internet Settings application to the SD root.</p>
|
||||
<p>To launch custom code, we exploit a flaw in the DSiWare Data Management window of the Settings application.</p>
|
||||
<p>To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system.</p>
|
||||
<p>For a more technical explanation, see <a href="https://github.com/zoogie/Bannerbomb3">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
|
@ -27,38 +27,43 @@ If you have a Taiwanese console (indicated by a T after the system version), fol
|
|||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 exploit onto your device's SD card.
|
||||
|
||||
1. Open [BannerBomb3 Tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php) on your computer
|
||||
1. Upload your movable.sed using the "Choose File" option
|
||||
1. Click "Build and Download"
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` inside of a zip file (`BannerBomb3.zip`)
|
||||
1. If your console is powered on, power off your console
|
||||
1. Slå av enheten
|
||||
1. Sett inn SD-kortet i datamaskinen din
|
||||
1. Open [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen) on your computer
|
||||
1. Upload your movable.sed using the “Choose File” option
|
||||
1. Click “Build and Download”
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a payload called `bb3.bin` inside of a zip archive (`DSIWARE_EXPLOIT.zip`)
|
||||
1. Copy `bb3.bin` from `DSIWARE_EXPLOIT.zip` to the root of your SD card
|
||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `BannerBomb3.zip` to the `Nintendo DSiWare` folder
|
||||
1. Copy the `F00D43D5.bin` file from `DSIWARE_EXPLOIT.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
#### Section II - Hardware Button Check
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next page.
|
||||
In this section, you will test the SAFE_MODE function of your device. This will determine which method you will follow in the next page.
|
||||
|
||||
1. Sett inn SD-kortet i konsollen igjen
|
||||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare` -> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your system should flash Magenta (pink/purple) and then crash a few seconds later. This means it worked
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
1. If prompted to update, press Cancel
|
||||
+ If the device boots to the HOME Menu, just continue to the next step
|
||||
1. Slå av enheten
|
||||
1. Sett inn SD-kortet i datamaskinen din
|
||||
1. You should now have `42383841.bin` on the root of your SD card. Copy this file to somewhere on your computer, as you will use it on the next page
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
1. Delete `F00D43D5.bin` from your Nintendo DSiWare folder and from your computer. This file will not be needed anymore
|
||||
|
||||
___
|
||||
|
||||
Continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
### Next steps: Choose an exploit
|
||||
|
||||
If your device booted into Safe Mode and prompted to you to do a system update in Section II, Safe Mode is working on your device.
|
||||
|
||||
If your device booted into Safe Mode, continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
{: .notice--primary}
|
||||
|
||||
If your device did NOT boot into Safe Mode, continue to [Installing boot9strap (Fredtool)](installing-boot9strap-(fredtool))
|
||||
{: .notice--warning}
|
||||
|
|
|
|||
|
|
@ -6,14 +6,13 @@ title: "Installing boot9strap (Fredtool)"
|
|||
|
||||
<details>
|
||||
<summary><em>Technical Details (optional)</em></summary>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application. This requires you to have a DSiWare backup, which you should have gotten in the previous section.</p>
|
||||
<p>This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to decrypt any DSiWare title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application.</p>
|
||||
<p>This is a currently working implementation of the "FIRM partitions known-plaintext" exploit detailed <a href="https://www.3dbrew.org/wiki/3DS_System_Flaws">here</a>.</p>
|
||||
</details>
|
||||
{: .notice--info}
|
||||
|
||||
### What You Need
|
||||
|
||||
* A DSiWare Backup, normally `42383841.bin` (You should have one on the root of your SD card from following [BannerBomb3](bannerbomb3))
|
||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||
* The latest release of [Frogminer_save](https://github.com/zoogie/Frogminer/releases/latest) (`Frogminer_save.zip`)
|
||||
* The latest release of [b9sTool](https://github.com/zoogie/b9sTool/releases/latest) (`boot.nds`)
|
||||
|
|
@ -27,17 +26,32 @@ As an additional safety measure, we will perform an additional check for custom
|
|||
1. Hold the (Select) button
|
||||
1. Power on your device while still holding the (Select) button
|
||||
1. If the check was successful, you will boot to the HOME Menu and you may proceed with this guide
|
||||
1. Slå av enheten
|
||||
|
||||
If you see a configuration menu, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
If you see a configuration menu or the console immediately powers off, you already have CFW, and continuing with these instructions may BRICK your device! Follow [Checking for CFW](checking-for-cfw) to upgrade your existing CFW.
|
||||
{: .notice--danger}
|
||||
|
||||
#### Section II - Prep Work
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and copy the resulting file dump to your computer so that you can use it on the next section.
|
||||
|
||||
1. Sett inn SD-kortet i konsollen igjen
|
||||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-fredtool)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Dump DSiWare"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - Prep Work
|
||||
|
||||
In this section, you will copy the files necessary to temporarily replace DS Connection Settings with Flipnote Studio, which is used to launch the boot9strap (custom firmware) installer.
|
||||
|
||||
1. Sett inn SD-kortet i datamaskinen din
|
||||
1. Open the [DSIHaxInjector_new](https://jenkins.nelthorya.net/job/DSIHaxInjector_new/build?delay=0sec) website on your computer
|
||||
1. Under the "Username" field, enter any alphanumeric name (no spaces or special characters)
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file using the first "Browse..." option
|
||||
1. Under the "DSiBin" field, upload your `42383841.bin` file from the root of your SD card using the first "Browse..." option
|
||||
1. Under the "MovableSed" field, upload your `movable.sed` file using the second "Browse..." option
|
||||
1. Under the "InjectionTarget" field, set the injection target to `DSinternet` (NOT memorypit)
|
||||
1. Click "Build"
|
||||
|
|
@ -46,7 +60,6 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
1. Click on the first search result
|
||||
+ This result should have the latest timestamp
|
||||
1. Click the "output_(name).zip" link
|
||||
1. Sett inn SD-kortet i datamaskinen din
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
|
|
@ -60,7 +73,7 @@ In this section, you will copy the files necessary to temporarily replace DS Con
|
|||
![]({{ "/images/screenshots/fredtool-root-layout.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
|
||||
#### Section III - Overwriting DS Connection Settings
|
||||
#### Section IV - Overwriting DS Connection Settings
|
||||
|
||||
In this section, you will copy the hacked DS Connection Settings DSiWare to internal memory, which will temporarily replace it with Flipnote Studio.
|
||||
|
||||
|
|
@ -73,7 +86,7 @@ In this section, you will copy the hacked DS Connection Settings DSiWare to inte
|
|||
1. Navigate to `Internet Settings` -> `Nintendo DS Connections`, then select "OK" ([image](/images/screenshots/fredtool/dsconnection.png))
|
||||
1. If the exploit was successful, your device will have loaded the JPN version of Flipnote Studio
|
||||
|
||||
#### Section IV - Flipnote Exploit
|
||||
#### Section V - Flipnote Exploit
|
||||
|
||||
If you would prefer a visual guide to this section, one is available [here](https://zoogie.github.io/web/flipnote_directions/).
|
||||
{: .notice--info}
|
||||
|
|
@ -99,7 +112,7 @@ In this section, you will perform a series of very specific steps within Flipnot
|
|||
+ If your device shuts down when you try to power it on, ensure that you have copied `boot.firm` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ If you see the Luma Configuration screen, press (Start) to reboot, then continue with the guide
|
||||
|
||||
#### Section V - Luma3DS Verification
|
||||
#### Section VI - Luma3DS Verification
|
||||
|
||||
Due to the nature of the exploit used, it is occasionally (but rarely) possible for boot9strap to not actually get installed. This section will therefore verify that boot9strap was successfully installed by seeing if some files that are normally automatically generated by Luma3DS were created.
|
||||
|
||||
|
|
@ -113,9 +126,9 @@ At this point, your console will boot to Luma3DS by default.
|
|||
+ Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
|
||||
+ On the next page, you will install useful homebrew applications to complete your setup.
|
||||
|
||||
#### Section VI - Restoring DS Connection Settings
|
||||
#### Section VII - Restoring DS Connection Settings
|
||||
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section III.
|
||||
In this section, you will restore DS Connection Settings to the way it was before it was temporarily replaced with Flipnote Studio in Section IV.
|
||||
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare` on your SD card
|
||||
1. Copy the `42383841.bin` file from the `clean` folder of the downloaded DSiWare archive (output_(name).zip) to the `Nintendo DSiWare` folder, replacing the existing one
|
||||
|
|
|
|||
|
|
@ -18,45 +18,28 @@ title: "Installing boot9strap (USM)"
|
|||
|
||||
These instructions work on USA, Europe, Japan, and Korea region consoles as indicated by the letters U, E, J, or K after the system version.
|
||||
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
{: .notice--warning}
|
||||
|
||||
### What You Need
|
||||
|
||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||
* The latest release of [SafeB9SInstaller](https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip) (direct download)
|
||||
* The latest release of [boot9strap](https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip) (direct download)
|
||||
* The latest release of [Luma3DS](https://github.com/LumaTeam/Luma3DS/releases/latest) (the Luma3DS `.zip` file)
|
||||
* The latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/download/v1.3/usm.bin) (direct download)
|
||||
|
||||
|
||||
#### Section I - Prep Work
|
||||
|
||||
In this section, you will copy the files needed to trigger the BannerBomb3 and unSAFE_MODE exploits onto your device's SD card.
|
||||
In this section, you will copy the files needed to trigger the unSAFE_MODE exploit onto your device's SD card.
|
||||
|
||||
1. If your device is powered on, power off your device
|
||||
1. Open [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php) on your computer
|
||||
1. Upload your movable.sed using the "Choose File" option
|
||||
1. Click "Build and Download"
|
||||
+ This will download an exploit DSiWare called `F00D43D5.bin` and a SAFE_MODE exploit data file called `usm.bin` inside of a zip archive (`unSAFE_MODE.zip`)
|
||||
1. Sett inn SD-kortet i datamaskinen din
|
||||
1. Your SD card should be inserted in your computer
|
||||
1. Copy `boot.firm` and `boot.3dsx` from the Luma3DS `.zip` to the root of your SD card
|
||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||
1. Create a folder named `boot9strap` on the root of your SD card
|
||||
1. Copy `boot9strap.firm` and `boot9strap.firm.sha` from the boot9strap `.zip` to the `/boot9strap/` folder on your SD card
|
||||
1. Copy `SafeB9SInstaller.bin` from the SafeB9SInstaller `.zip` to the root of your SD card
|
||||
1. Copy `usm.bin` from `unSAFE_MODE.zip` to the root of your SD card
|
||||
![]({{ "/images/screenshots/bb3/usm-root-layout.png" | absolute_url }}){: .notice--info}
|
||||
![]({{ "/images/screenshots/boot9strap-folder.png" | absolute_url }}){: .notice--info}
|
||||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
|
||||
+ `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
|
||||
+ `<ID1>` is a 32-letter folder inside of the `<ID0>`
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
|
||||
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
|
||||
+ If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
|
||||
1. Copy the `F00D43D5.bin` file from `unSAFE_MODE.zip` to the `Nintendo DSiWare` folder
|
||||
|
||||
![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
|
||||
{: .notice--info}
|
||||
1. Copy `usm.bin` to the root of your SD card
|
||||
|
||||
#### Section II - BannerBomb3
|
||||
|
||||
|
|
@ -66,9 +49,9 @@ In this section, you will trigger the BannerBomb3 exploit using the DSiWare Mana
|
|||
1. Power on your device
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-usm-menu)
|
||||
1. Press (A) to select "Inject haxx"
|
||||
+ Your device should show the BB3 multihax menu
|
||||
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-bb3-multihax-menu-usm)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Install unSAFE_MODE"
|
||||
+ Your device will automatically power off
|
||||
|
||||
#### Section III - unSAFE_MODE
|
||||
|
|
@ -77,7 +60,7 @@ In this section, you will enter Safe Mode (a feature available on all 3DS family
|
|||
|
||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
|
||||
+ Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
+ If you're unable to get into Safe Mode after multiple attempts, one of your buttons may be failing or broken. If this is the case, you will need to follow [an alternate branch of BannerBomb3](installing-boot9strap-(fredtool)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
1. Press "OK" to accept the update
|
||||
+ There is no update. This is part of the exploit
|
||||
1. Press "I accept" to accept the terms and conditions
|
||||
|
|
@ -107,8 +90,7 @@ In this section, you will trigger the BannerBomb3 exploit a second time so that
|
|||
|
||||
1. Launch System Settings on your device
|
||||
1. Navigate to `Data Management` -> `DSiWare`-> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
|
||||
+ Your device should show the [Bannerbomb3 menu](/images/screenshots/bb3/usm-menu.png)
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Restore slots"
|
||||
1. Use the D-Pad to navigate and press the (A) button to select "Uninstall unSAFE_MODE"
|
||||
+ Your device will automatically reboot
|
||||
1. Slå av enheten
|
||||
1. Sett inn SD-kortet i datamaskinen din
|
||||
|
|
|
|||
|
|
@ -56,6 +56,7 @@ In this section, you will use the Bruteforce Movable website to retrieve your de
|
|||
+ If you are still waiting after half an hour, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask (in English) for someone there to assist you
|
||||
1. When the process is completed, download your `movable.sed` file from the site
|
||||
+ Keep this file as you will need it in the upcoming pages
|
||||
1. Slå av enheten
|
||||
|
||||
___
|
||||
|
||||
|
|
@ -63,11 +64,11 @@ ___
|
|||
|
||||
Once you have your device's encryption key (`movable.sed`), you will use it in conjunction with other exploits to install custom firmware on your 3DS.
|
||||
|
||||
#### unSAFE_MODE (Recommended)
|
||||
#### BannerBomb3
|
||||
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the SAFE_MODE firmware present in all 3DS units.
|
||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to take advantage of exploits in the System Settings application.
|
||||
|
||||
Continue to [Installing boot9strap (USM)](installing-boot9strap-(usm))
|
||||
Continue to [BannerBomb3](bannerbomb3)
|
||||
{: .notice--primary}
|
||||
|
||||
___
|
||||
|
|
|
|||
|
|
@ -126,11 +126,11 @@ If this is unsuccessful, try using another SD card.
|
|||
|
||||
## Installing boot9strap (USM)
|
||||
|
||||
### DSiWare Management menu crashes without showing USM menu
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (USM)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php).
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `usm.bin` is on the root of the SD card. If it is missing, then download the latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/latest) (the RELEASE `.zip` file), and copy the `usm.bin` file to the root of your SD card.
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, you will need to follow [an alternate branch of Seedminer](homebrew-launcher-(pichaxx)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
|
|
@ -144,16 +144,24 @@ If neither of these solutions fixes this problem, then custom firmware may have
|
|||
|
||||
### DSiWare Management shows a question mark
|
||||
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php), ensuring that you use the `movable.sed` file for your console.
|
||||
There may be an issue with your `F00D43D5.bin` file (it may be corrupted or intended for the wrong 3DS). Re-create your `F00D43D5.bin` file with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen), ensuring that you use the `movable.sed` file for your console.
|
||||
|
||||
### DSiWare Management menu crashes without purple screen
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [BannerBomb3 tool](https://3ds.nhnarwhal.com/3dstools/bannerbomb3.php). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
||||
|
||||
---
|
||||
|
||||
## Installing boot9strap (Fredtool)
|
||||
|
||||
### DSiWare Management menu crashes without showing BB3 multihax menu (Fredtool)
|
||||
|
||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [Bannerbomb3 Injector](http://3dstools.nhnarwhal.com/#/bb3gen).
|
||||
|
||||
Also, ensure that `bb3.bin` is on the root of the SD card. If it is missing, then download the latest release of [Bannerbomb3](https://github.com/lifehackerhansol/Bannerbomb3/releases/download/v3.0-lhs1/bb3.bin) (direct download), and copy the `bb3.bin` file to the root of your SD card.
|
||||
|
||||
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||
|
||||
### Error on Fredtool Injector page
|
||||
|
||||
Ensure that your `movable.sed` and DSiWare backup come from the same console. A mismatch will result in an error.
|
||||
|
|
|
|||
Some files were not shown because too many files have changed in this diff Show more
Loading…
Reference in a new issue