Toggle menu
Toggle preferences menu
Toggle personal menu
Not logged in
Your IP address will be publicly visible if you make any edits.

3DS:Alternate Exploits/Installing boot9strap (SSLoth-Browser): Difference between revisions

From Hacks Guide Wiki
(replace qrlite parser function with template)
(Browserhax is *probably* back)
(14 intermediate revisions by 5 users not shown)
Line 1: Line 1:
==Technical Details==
==Required Reading==
In order to exploit the Browser application, we need to bypass the browser version check, which is designed to disallow the use of the browser without updating to the latest system version.


A public proxy server is available, which, with the help of the SSLoth exploit, can bypass this check.
SSLoth allows users on version 11.13.0 and below to bypass the browser version check, allowing use of new-browserhax or old-browserhax, which can then be used in conjunction with universal-otherapp.


Once the bypass is active, an exploit webpage will be accessible which will do the rest of the job.


For technical details on the exploits that you will be using on this page, see here (SSLoth) and here (universal-otherapp).
{{warning|text=If you have updated your device to your current version using a cartridge, your Internet Browser will be inaccessible. If this is the case, you will need to update your device to the latest version through System Settings and then follow the method for the latest version.}}
 
==Compatibility Notes==
SSLoth allows users on version 11.13.0 and below to bypass the browser version check, allowing the use of new-browserhax or old-browserhax (compatible with versions 11.4.0 through 11.13.0 in all regions), which can then be used in conjunction with universal-otherapp.


==What You Need==
==What You Need==


*The latest release of [https://github.com/TuxSH/universal-otherapp/releases/latest universal-otherapp]
*The latest release of [https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip SafeB9SInstaller] (direct download)
*The latest release of [https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip SafeB9SInstaller] (direct download)
*The latest release of [https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip boot9strap] (direct download)
*The latest release of [https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip boot9strap] (direct download)
*The latest release of [https://github.com/LumaTeam/Luma3DS/releases/latest Luma3DS] (the Luma3DS <code>.zip</code> file)
*The latest release of [https://github.com/LumaTeam/Luma3DS/releases/latest Luma3DS] (the Luma3DS <code>.zip</code> file)
*The latest release of [https://github.com/TuxSH/universal-otherapp/releases/latest universal-otherapp] (<code>otherapp.bin</code>)


==Instructions==
==Instructions==


====Section I - Prep Work====
===Section I - Prep Work===
 
#Power off your device
#Power off your console
#Insert your SD card into your computer
#Insert your SD card into your computer
#Copy <code>otherapp.bin</code> to the root of your SD card and rename it to <code>arm11code.bin</code>
#Copy <code>otherapp.bin</code> to the root of your SD card and rename it to <code>arm11code.bin</code>
#*The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
#*If you do not see the <code>.bin</code> extension, do not add it to the end of the filename
#*If you do not see the <code>.bin</code> extension, do not add it to the end of the filename
#Copy <code>boot.firm</code> and <code>boot.3dsx</code> from the Luma3DS <code>.zip</code> to the root of your SD card
#Copy <code>boot.firm</code> and <code>boot.3dsx</code> from the Luma3DS <code>.zip</code> to the root of your SD card
Line 31: Line 24:
#Copy <code>boot9strap.firm</code> and <code>boot9strap.firm.sha</code> from the boot9strap <code>.zip</code> to the <code>/boot9strap/</code> folder on your SD card
#Copy <code>boot9strap.firm</code> and <code>boot9strap.firm.sha</code> from the boot9strap <code>.zip</code> to the <code>/boot9strap/</code> folder on your SD card
#Copy <code>SafeB9SInstaller.bin</code> from the SafeB9SInstaller <code>.zip</code> to the root of your SD card
#Copy <code>SafeB9SInstaller.bin</code> from the SafeB9SInstaller <code>.zip</code> to the root of your SD card
#Reinsert your SD card into your console
#Reinsert your SD card into your device
#Power on your console
#Power on your device
 
====Section II - SSLoth====


===Section II - SSLoth===
#Launch the System Settings application
#Launch the System Settings application
#Navigate to <code>Internet Settings</code> -> <code>Connection Settings</code>
#Navigate to <code>Internet Settings</code> -> <code>Connection Settings</code>
#Click on your network connection slot and navigate to <code>Change Settings</code> -> <code>Next Page (right arrow)</code> -> <code>Proxy Settings</code>
#Click on your network connection slot and navigate to <code>Change Settings</code> -> <code>Next Page (right arrow)</code> -> <code>Proxy Settings</code>
#Set “Proxy Settings” to “Yes”, then click <code>Detailed Setup</code>
#Set "Proxy Settings" to "Yes", then click <code>Detailed Setup</code>
#Set the Proxy Server to <code>ssloth.nintendohomebrew.com</code>, and the Port to <code>8080</code>
#Set the Proxy Server to <code>192.9.234.11</code>, and the Port to <code>8080</code>
#Click OK, then click Save
#Click OK, then click Save
#When prompted, click “Test” to perform the connection test
#When prompted, click "Test" to perform the connection test
#*The test should succeed
#*The test should succeed
#Click “OK” to continue
#Power off your device
#Press “Back” twice, then “Close” to go back to the HOME Menu
 
====Section III - Launching SafeB9SInstaller====


#On the HOME Menu, press the Left and Right shoulder buttons at the same time to open the camera
===Section III - Launching SafeB9SInstaller===
#*If you are unable to open the camera, open the Internet Browser and manually type the URL instead (<code><nowiki>https://zoogie.github.io/web/nbhax/</nowiki></code>)
#Power on your device
#Tap the QR code button and scan this QR code<br>{{qrlite|content=https://zoogie.github.io/web/nbhax/|format=png|size=5|margin=5}}
#On the HOME Menu, press the Left and Right shoulder buttons together to open the camera
#*If you get a crash or an error code, follow the troubleshooting guide at the bottom of the page
#*If you are unable to open the camera, open the Internet Browser and manually type the URL instead (<code>https://zoogie.github.io/web/nbhax/</code>)
#*If you get a security certificate warning, press (A) to allow the connection
#Tap the QR code button and scan [http://api.qrserver.com/v1/create-qr-code/?color=000000&bgcolor=FFFFFF&data=https%3A%2F%2Fzoogie.github.io%2Fweb%2Fnbhax&qzone=1&margin=0&size=400x400&ecc=L this QR code]
#Tap the “PROCEED TO HAXX” button
#*If the browser prompts an update, it is possible that your ISP is rerouting DNS changes. Try another internet connection, or update your console to the latest version and follow [[3dsguide:seedminer|Seedminer]].
#If the exploit was successful, you will have booted into SafeB9SInstaller
#If the exploit was successful, you will have booted into SafeB9SInstaller
#*If you get an error, follow the troubleshooting guide at the bottom of the page
====Section IV - Installing boot9strap====


===Section IV - Installing boot9strap===
#When prompted, input the key combo given on the top screen to install boot9strap
#When prompted, input the key combo given on the top screen to install boot9strap
#*If a step on the lower screen has red-colored text, and you are not prompted to input a key combo, [[3dsguide:troubleshooting#issues-with-safeb9sinstaller|follow this troubleshooting guide]]
#Once it is complete, press (A) to reboot your device
#Once it is complete, press (A) to reboot your console
#Your device should have rebooted into the Luma3DS configuration menu
#Your console should have booted into the Luma3DS configuration menu
#*If your device shuts down when you try to power it on, ensure that you have copied <code>boot.firm</code> from the Luma3DS <code>.zip</code> to the root of your SD card
#*Luma3DS configuration menu are settings for the Luma3DS custom firmware. Many of these settings may be useful for customization or debugging
#*For the purpose of this guide, '''leave these options on the default settings''' (do not check or uncheck anything)
#*If your console shuts down when you try to power it on, ensure that you have copied <code>boot.firm</code> from the Luma3DS <code>.zip</code> to the root of your SD card
#Press (Start) to save and reboot
#Press (Start) to save and reboot
#*If you get an error, just continue to the next section


====Section V - Restoring default proxy====
{{info|At this point, your console will boot to Luma3DS by default.
*Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
*On the next page, you will install useful homebrew applications to complete your setup.}}


===Section VI - Restoring default DNS===
#Launch the System Settings application
#Launch the System Settings application
#Navigate to <code>Internet Settings</code> -> <code>Connection Settings</code>
#Navigate to <code>Internet Settings</code> -> <code>Connection Settings</code>
#Click on your network connection slot and navigate to <code>Change Settings</code> -> <code>Next Page (right arrow)</code> -> <code>Proxy Settings</code>
#Click on your network connection slot and navigate to <code>Change Settings</code> -> <code>Next Page (right arrow)</code> -> <code>Proxy Settings</code>
#Set “Proxy Settings” to “No”
#Set "Proxy Settings" to "No"
#Click OK, then click Save
#Click OK, then click Save
#When prompted, click “Test” to perform the connection test
#When prompted, click "Test" to perform the connection test
#*The test should succeed
#*The test should succeed
#Power off your console
#Power off your device
 
At this point, your console will boot to Luma3DS by default.
 
*Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
*On the next page, you will install useful homebrew applications to complete your setup.


-----
-----


<span style="font-size:200%;">Continue to [[3dsguide:finalizing-setup|Finalizing Setup]]</span>
<span style="font-size:200%;">Continue to [[3dsguide:finalizing-setup|Finalizing Setup]]</span>
== Troubleshooting ==
=== Red/purple/pink and white screen after running Browserhax ===
This likely indicates that you already have custom firmware. You should [[3dsguide:checking-for-cfw|check for CFW]].
=== "An error has occurred. Hold down the POWER button to turn off the power..." (black screen with text) ===
The file <code>arm11code.bin</code> is missing or misplaced. Download the latest release of [https://github.com/TuxSH/universal-otherapp/releases/latest universal-otherapp], place <code>otherapp.bin</code> on the root of your SD card and rename it to <code>arm11code.bin</code>. Do not add the <code>.bin</code> extension if you do not already see it.
=== "An error has occurred, forcing the software to close..." (white message box) ===
There may be an issue with your <code>arm11code.bin</code> file. Download the latest release of [https://github.com/TuxSH/universal-otherapp/releases/latest universal-otherapp], place <code>otherapp.bin</code> on the root of your SD card and rename it to <code>arm11code.bin</code>. Do not add the <code>.bin</code> extension if you do not already see it.
You can also try resetting your browser save data:
# Launch the browser, then launch the browser settings
# Scroll to the bottom and select “Reset Save Data” (it may also be called “Initialize Save Data” or “Clear All Save Data”)
# Return to Section III
=== Opening the browserhax QR code or URL crashes ===
Browser based exploits (such as this one) are often unstable and crash frequently, but they can sometimes be fixed by doing the following steps.
# Launch the browser, then launch the browser settings
# Scroll to the bottom and select “Reset Save Data” (it may also be called “Initialize Save Data” or “Clear All Save Data”)
# Return to Section III
=== System Update prompt when opening browser ===
The SSLoth proxy was incorrectly configured. Re-do Section II on this page.
=== Error 032-0420 when opening browser ===
Follow these steps in order:
# Launch System Settings on your console
# Navigate to <code>Internet Settings</code> -> <code>Connection Settings</code>
# Click on your network connection slot and navigate to <code>Change Settings</code> -> <code>Next Page (right arrow)</code> -> <code>Proxy Settings</code>
# Set “Proxy Settings” to “No”
# Click OK, then click Save
# When prompted, click “Test” to perform the connection test
#* The test should succeed
# Click “OK” to continue
# Press “Back” twice, then “Close” to go back to the HOME Menu
# Open the Internet Browser once
# If prompted about a system update, press OK
#* This won’t actually update the system
# Start again from Section II
=== Frozen on "Doing agbhax..." ===
There may be an issue with your <code>arm11code.bin</code> file. Download the latest release of [https://github.com/TuxSH/universal-otherapp/releases/latest universal-otherapp], place <code>otherapp.bin</code> on the root of your SD card and rename it to <code>arm11code.bin</code>. Do not add the <code>.bin</code> extension if you do not already see it.
=== "PrepareArm9ForTwl returned error c8804631!" ===
Join [https://discord.gg/MWxPgEp Nintendo Homebrew on Discord] for assistance.
=== Failed to mount the SD card! ===
Back up your data and [[Formatting an SD card|reformat your SD card as FAT32]] with the recommended tool depending on your operating system. MiniTool Partition Wizard and the HP formatting tool (HPUSBDisk) are known to cause issues with 3DS SD cards.
If this is unsuccessful, try using another SD card.
[[Category:Nintendo 3DS guides]]

Revision as of 17:31, 10 October 2022

Required Reading

SSLoth allows users on version 11.13.0 and below to bypass the browser version check, allowing use of new-browserhax or old-browserhax, which can then be used in conjunction with universal-otherapp.


OOjs UI icon information-warning.svg If you have updated your device to your current version using a cartridge, your Internet Browser will be inaccessible. If this is the case, you will need to update your device to the latest version through System Settings and then follow the method for the latest version.

What You Need

Instructions

Section I - Prep Work

  1. Power off your device
  2. Insert your SD card into your computer
  3. Copy otherapp.bin to the root of your SD card and rename it to arm11code.bin
    • If you do not see the .bin extension, do not add it to the end of the filename
  4. Copy boot.firm and boot.3dsx from the Luma3DS .zip to the root of your SD card
  5. Create a folder named boot9strap on the root of your SD card
  6. Copy boot9strap.firm and boot9strap.firm.sha from the boot9strap .zip to the /boot9strap/ folder on your SD card
  7. Copy SafeB9SInstaller.bin from the SafeB9SInstaller .zip to the root of your SD card
  8. Reinsert your SD card into your device
  9. Power on your device

Section II - SSLoth

  1. Launch the System Settings application
  2. Navigate to Internet Settings -> Connection Settings
  3. Click on your network connection slot and navigate to Change Settings -> Next Page (right arrow) -> Proxy Settings
  4. Set "Proxy Settings" to "Yes", then click Detailed Setup
  5. Set the Proxy Server to 192.9.234.11, and the Port to 8080
  6. Click OK, then click Save
  7. When prompted, click "Test" to perform the connection test
    • The test should succeed
  8. Power off your device

Section III - Launching SafeB9SInstaller

  1. Power on your device
  2. On the HOME Menu, press the Left and Right shoulder buttons together to open the camera
  3. Tap the QR code button and scan this QR code
    • If the browser prompts an update, it is possible that your ISP is rerouting DNS changes. Try another internet connection, or update your console to the latest version and follow Seedminer.
  4. If the exploit was successful, you will have booted into SafeB9SInstaller

Section IV - Installing boot9strap

  1. When prompted, input the key combo given on the top screen to install boot9strap
  2. Once it is complete, press (A) to reboot your device
  3. Your device should have rebooted into the Luma3DS configuration menu
    • If your device shuts down when you try to power it on, ensure that you have copied boot.firm from the Luma3DS .zip to the root of your SD card
  4. Press (Start) to save and reboot
    • If you get an error, just continue to the next section
OOjs UI icon information-progressive.svg At this point, your console will boot to Luma3DS by default.
  • Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
  • On the next page, you will install useful homebrew applications to complete your setup.

Section VI - Restoring default DNS

  1. Launch the System Settings application
  2. Navigate to Internet Settings -> Connection Settings
  3. Click on your network connection slot and navigate to Change Settings -> Next Page (right arrow) -> Proxy Settings
  4. Set "Proxy Settings" to "No"
  5. Click OK, then click Save
  6. When prompted, click "Test" to perform the connection test
    • The test should succeed
  7. Power off your device

Continue to Finalizing Setup