---
title: "BannerBomb3"
---

{% include toc title="條目內容" %}

{% capture technical_info %}
<summary><em>Technical Details (optional)</em></summary>

To launch custom code, we exploit a flaw in the DSiWare Data Management window of the Settings application.

To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system.

For a more technical explanation, see [here](https://github.com/zoogie/Bannerbomb3).
{% endcapture %}

<details>{{ technical_info | markdownify }}</details>
{: .notice--info}

### 相容性資訊

這些操作在美、歐、日、韓版可用，可透過系統版本號末尾的 「U、E、J、K」 字元來辨別。

如果您的主機為台灣版主機(系統版本號以 T 結尾的主機)，請見[此頁面](bannerbomb3-fredtool-(twn))。
{: .notice--warning}

### 必備項目

* Your `movable.sed` file from completing Seedminer
* The latest release of [BannerBomb3](https://github.com/zoogie/Bannerbomb3/releases/download/v3.0/Release_v3.0.zip) (`Release_v3.0.zip`, direct download)

#### 第一節 — 準備工作

In this section, you will copy the files needed to trigger the BannerBomb3 exploit onto your console's SD card.

1. Power off your console
1. 將 SD 卡插入至電腦中
1. Open [Bannerbomb3 Injector](https://zoogie.github.io/web/bb3/) on your computer
1. Upload your movable.sed using the “Choose File” option
1. Click “Build and Download”
    + This will download an exploit DSiWare called `F00D43D5.bin`, which will be contained in a zip archive (`BannerBomb3.zip`)
1. Copy `bb3.bin` from `Release_v3.0.zip` to the root of your SD card
    + 「SD 卡的根目錄」指的是你的 SD 卡含有 Nintendo 3DS 資料夾的目錄，而非該資料夾內部
    + This file does not need to be opened or extracted
    ![]({{ "/images/screenshots/bb3/bb3-root-layout.png" | absolute_url }}){: .notice--info}
1. Copy `Launcher.dat` from the folder for your model and region inside the Release `.zip` to the root of your SD card
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<ID1>` on your SD card
    + `<ID0>` is the 32-letter folder name that you copied in [Seedminer](seedminer)
    + `<ID1>` is a 32-letter folder inside of the `<ID0>`
    + If you have multiple `<ID1>` folders, follow the instructions [here](troubleshooting#bannerbomb3)
    ![]({{ "/images/screenshots/bb3/dsiware-location-1.png" | absolute_url }}){: .notice--info}
1. Create a folder named `Nintendo DSiWare` inside of the `<ID1>`
    + If you already had the folder *and* there are any existing DSiWare backup files (`<8-character-id>.bin`) inside, copy them to your PC and remove them from your SD card
1. Copy the `F00D43D5.bin` file from `BannerBomb3.zip` to the `Nintendo DSiWare` folder

![]({{ "/images/screenshots/bb3/dsiware-location-2.png" | absolute_url }})
{: .notice--info}

#### 第二節 — BannerBomb3

In this section, you will trigger the BannerBomb3 exploit using the DSiWare Management menu and use it to install the menuhax67 exploit.

1. Reinsert your SD card into your console 
1. Power on your console
1. Launch System Settings on your console
1. Navigate to `Data Management` -> `DSiWare` -> `SD Card` ([image](/images/screenshots/bb3/dsiware-management.png))
    + Your console should show the BB3 multihax menu
1. Use the D-Pad to navigate and press the (A) button to select "Install *hax"
    + Your console will automatically reboot
1. Power off your console

___

### Continue to [Installing boot9strap (menuhax)](installing-boot9strap-(menuhax))
{: .notice--primary}