3DS:Bannerbomb3/Installing boot9strap (USM): Difference between revisions

(8 intermediate revisions by 3 users not shown)

Line 1:

==Technical Details==

In order to exploit the SAFE_MODE firmware of our system, we need to inject an exploited WiFi profile.

We can do this using an existing exploit, ~~BannerBomb3~~.

We can do this using an existing exploit, Bannerbomb3.

To accomplish this, we use your system’s encryption key (movable.sed) to build a DSiWare backup that exploits the system in order to inject the exploited WiFi profile into your connections list.

Line 7:

Once the WiFi profile has been injected, we will use SAFE_MODE, which is a recovery feature present on all 3DS consoles, to activate the exploited WiFi profile.

For a more technical explanation, see the following links for information on the ~~BannerBomb3~~ and unSAFE_MODE exploits: [https://github.com/zoogie/Bannerbomb3 ~~BannerBomb3~~], [https://github.com/zoogie/unSAFE_MODE/ unSAFE_MODE].

For a more technical explanation, see the following links for information on the Bannerbomb3 and unSAFE_MODE exploits: [https://github.com/zoogie/Bannerbomb3 Bannerbomb3], [https://github.com/zoogie/unSAFE_MODE/ unSAFE_MODE].

==Compatibility Notes==

Line 13:

{{Warning

| text = If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [[3DS:Alternate Exploits/Installing boot9strap (Fredtool)|an alternate branch of Seedminer]]. For assistance with this matter, join ~~[https://discord.gg/MWxPgEp~~ Nintendo Homebrew on Discord] and ask, in English, for help.

| text = If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [[3DS:Alternate Exploits/Installing boot9strap (Fredtool)|an alternate branch of Seedminer]]. For assistance with this matter, join {{ml|Get support|Nintendo Homebrew on Discord}} and ask, in English, for help.

}}

Line 29:

#Your SD card should be inserted in your computer

#Copy <code>usm.bin~~</code> to the root of your SD card~~

#Copy <code>usm.bin</code> to the root of your SD card

~~#Copy <code>boot.firm</code> and <code>boot.3dsx</code> from the Luma3DS <code>.zip~~</code> to the root of your SD card

#* The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it

#*The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it

#Copy everything from the Luma3DS <code>.zip</code> to the root of your SD card

#Create a folder named <code>boot9strap</code> on the root of your SD card

#Copy <code>boot9strap.firm</code> and <code>boot9strap.firm.sha</code> from the boot9strap <code>.zip</code> to the <code>/boot9strap/</code> folder on your SD card

#Copy <code>SafeB9SInstaller.bin</code> from the SafeB9SInstaller <code>.zip</code> to the root of your SD card

===Section II - BannerBomb3===

===Section II - Bannerbomb3<span class="anchor" id="Section II - BannerBomb3"></span>===

In this section, you will trigger the ~~BannerBomb3~~ exploit using the DSiWare Management menu, which can be used to overwrite your Wi-Fi slots with hacked data. Your Wi-Fi connection settings will be temporarily overwritten while the exploit is active.

In this section, you will trigger the Bannerbomb3 exploit using the DSiWare Management menu, which can be used to overwrite your Wi-Fi slots with hacked data. Your Wi-Fi connection settings will be temporarily overwritten while the exploit is active.

#Reinsert your SD card into your console

Line 44:

#Navigate to <code>Data Management</code> -> <code>DSiWare</code> -> <code>SD Card</code> (image(not really))

#*Your console should show the BB3 multihax menu

#*If the BB3 multihax menu doesn’t open, [~~[3dsguide~~:~~troubleshooting~~#~~bannerbomb3~~|~~follow this troubleshooting guide]]~~

#*If your console shows a ? sign, there might be an issue with your <code>F00D43D5.bin</code>. Redownload it from the [https://3dstools.nhnarwhal.com/#/bb3gen Bannerbomb3 Injector] and make sure you are using a <code>movable.sed</code> '''from your own console'''

#*If the BB3 multihax menu doesn’t open, check if <code>F00D43D5.bin</code> is missing inside <code>Nintendo 3DS</code> -> <code><ID0></code> -> <code><ID1></code> -> <code>Nintendo DSiWare</code>. If the file is missing, grab it from the <code>DSIWARE_EXPLOIT.zip</code> that you've downloaded before and put it inside the <code>Nintendo DSiWare</code> folder. If it's there, ensure that <code>Nintendo DSiWare</code> is spelled and spaced correctly (uppercase/lowercase doesn't matter)

#*If the console crashes without showing the BB3 multihax menu, ensure that you have <code>bb3.bin</code> on the root of the SD card. If you have it, check if <code>F00D43D5.bin</code> is the only file in <code>Nintendo DSiWare</code>. If it's the only one, redownload the .zip file from [http://3dstools.nhnarwhal.com/#/bb3gen Bannerbomb3 Injector] and replace both <code>F00D43D5.bin</code> and <code>bb3.bin</code>. If neither of these solutions have worked, custom firmware may have been uninstalled in this device before, in a way that makes this exploit not possible to perform. Join the {{ml|Get support|Nintendo Homebrew Discord}} and ask for assistence

#*If the BB3 multihax menu says “cfw installed already”, you already have custom firmware and should continue from [[3dsguide:checking-for-cfw|here]]

#Use the D-Pad to navigate and press the (A) button to select “Install unSAFE_MODE”

Line 53:

Line 55:

#Ensure that all three connections are named “Haaaaaaaxxxxxxxxx…”

#*Do NOT change these settings!

#*If all three connections are NOT all named “Haaaaaaaxxxxxxxxx…”, STOP! Something went wrong in this section and MUST be fixed before you can continue

#*If all three connections are NOT all named “Haaaaaaaxxxxxxxxx…”, STOP! Something went wrong in this section and MUST be fixed before you can continue. Join the {{ml|Get support|Nintendo Homebrew Discord}} and ask for support

#Power off your console

Line 89:

Line 91:

===Section V - Restoring WiFi Configuration Profiles===

In this section, you will trigger the ~~BannerBomb3~~ exploit a second time so that you can restore the Wi-Fi connection slots that were overwritten in Section II.

In this section, you will trigger the Bannerbomb3 exploit a second time so that you can restore the Wi-Fi connection slots that were overwritten in Section II.

#Launch System Settings on your console

Line 98:

Line 100:

#Insert your SD card into your computer

#Navigate to <code>Nintendo 3DS</code> -> <code><ID0></code> -> <code><ID1></code> -> <code>Nintendo DSiWare</code> on your SD card

#Delete <code>F00D43D5.bin</code> from your Nintendo DSiWare folder and from your computer. ~~This file will not~~ be needed anymore

#Delete <code>F00D43D5.bin</code> from your Nintendo DSiWare folder and from your computer

#Delete <code>bb3.bin</code> from the root of your SD card and from your computer

#* Both of these files won't be needed anymore

<span style="font-size:200%;">Continue to [[3dsguide:finalizing-setup|Finalizing Setup]]</span>

[[Category:Nintendo 3DS guides]]