3DS:Bannerbomb3/Installing boot9strap (USM): Difference between revisions
From Hacks Guide Wiki
More actions
Geometomas (talk | contribs) m →Section II - BannerBomb3: typo |
m Text replacement - "\[\[Get support\|(.*?)\]\]" to "{{ml|Get support|$1}}" |
||
| (2 intermediate revisions by 2 users not shown) | |||
| Line 1: | Line 1: | ||
==Technical Details== | ==Technical Details== | ||
In order to exploit the SAFE_MODE firmware of our system, we need to inject an exploited WiFi profile. | In order to exploit the SAFE_MODE firmware of our system, we need to inject an exploited WiFi profile. | ||
We can do this using an existing exploit, | We can do this using an existing exploit, Bannerbomb3. | ||
To accomplish this, we use your system’s encryption key (movable.sed) to build a DSiWare backup that exploits the system in order to inject the exploited WiFi profile into your connections list. | To accomplish this, we use your system’s encryption key (movable.sed) to build a DSiWare backup that exploits the system in order to inject the exploited WiFi profile into your connections list. | ||
| Line 7: | Line 7: | ||
Once the WiFi profile has been injected, we will use SAFE_MODE, which is a recovery feature present on all 3DS consoles, to activate the exploited WiFi profile. | Once the WiFi profile has been injected, we will use SAFE_MODE, which is a recovery feature present on all 3DS consoles, to activate the exploited WiFi profile. | ||
For a more technical explanation, see the following links for information on the | For a more technical explanation, see the following links for information on the Bannerbomb3 and unSAFE_MODE exploits: [https://github.com/zoogie/Bannerbomb3 Bannerbomb3], [https://github.com/zoogie/unSAFE_MODE/ unSAFE_MODE]. | ||
==Compatibility Notes== | ==Compatibility Notes== | ||
| Line 13: | Line 13: | ||
{{Warning | {{Warning | ||
| text = If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [[3DS:Alternate Exploits/Installing boot9strap (Fredtool)|an alternate branch of Seedminer]]. For assistance with this matter, join | | text = If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [[3DS:Alternate Exploits/Installing boot9strap (Fredtool)|an alternate branch of Seedminer]]. For assistance with this matter, join {{ml|Get support|Nintendo Homebrew on Discord}} and ask, in English, for help. | ||
}} | }} | ||
| Line 36: | Line 36: | ||
#Copy <code>SafeB9SInstaller.bin</code> from the SafeB9SInstaller <code>.zip</code> to the root of your SD card | #Copy <code>SafeB9SInstaller.bin</code> from the SafeB9SInstaller <code>.zip</code> to the root of your SD card | ||
===Section II - BannerBomb3=== | ===Section II - Bannerbomb3<span class="anchor" id="Section II - BannerBomb3"></span>=== | ||
In this section, you will trigger the | In this section, you will trigger the Bannerbomb3 exploit using the DSiWare Management menu, which can be used to overwrite your Wi-Fi slots with hacked data. Your Wi-Fi connection settings will be temporarily overwritten while the exploit is active. | ||
#Reinsert your SD card into your console | #Reinsert your SD card into your console | ||
| Line 46: | Line 46: | ||
#*If your console shows a ? sign, there might be an issue with your <code>F00D43D5.bin</code>. Redownload it from the [https://3dstools.nhnarwhal.com/#/bb3gen Bannerbomb3 Injector] and make sure you are using a <code>movable.sed</code> '''from your own console''' | #*If your console shows a ? sign, there might be an issue with your <code>F00D43D5.bin</code>. Redownload it from the [https://3dstools.nhnarwhal.com/#/bb3gen Bannerbomb3 Injector] and make sure you are using a <code>movable.sed</code> '''from your own console''' | ||
#*If the BB3 multihax menu doesn’t open, check if <code>F00D43D5.bin</code> is missing inside <code>Nintendo 3DS</code> -> <code><ID0></code> -> <code><ID1></code> -> <code>Nintendo DSiWare</code>. If the file is missing, grab it from the <code>DSIWARE_EXPLOIT.zip</code> that you've downloaded before and put it inside the <code>Nintendo DSiWare</code> folder. If it's there, ensure that <code>Nintendo DSiWare</code> is spelled and spaced correctly (uppercase/lowercase doesn't matter) | #*If the BB3 multihax menu doesn’t open, check if <code>F00D43D5.bin</code> is missing inside <code>Nintendo 3DS</code> -> <code><ID0></code> -> <code><ID1></code> -> <code>Nintendo DSiWare</code>. If the file is missing, grab it from the <code>DSIWARE_EXPLOIT.zip</code> that you've downloaded before and put it inside the <code>Nintendo DSiWare</code> folder. If it's there, ensure that <code>Nintendo DSiWare</code> is spelled and spaced correctly (uppercase/lowercase doesn't matter) | ||
#*If the console crashes without showing the BB3 multihax menu, ensure that you have <code>bb3.bin</code> on the root of the SD card. If you have it, check if <code>F00D43D5.bin</code> is the only file in <code>Nintendo DSiWare</code>. If it's the only one, redownload the .zip file from [http://3dstools.nhnarwhal.com/#/bb3gen Bannerbomb3 Injector] and replace both <code>F00D43D5.bin</code> and <code>bb3.bin</code>. If neither of these solutions have worked, custom firmware may have been uninstalled in this device before, in a way that makes this exploit not possible to perform. Join the | #*If the console crashes without showing the BB3 multihax menu, ensure that you have <code>bb3.bin</code> on the root of the SD card. If you have it, check if <code>F00D43D5.bin</code> is the only file in <code>Nintendo DSiWare</code>. If it's the only one, redownload the .zip file from [http://3dstools.nhnarwhal.com/#/bb3gen Bannerbomb3 Injector] and replace both <code>F00D43D5.bin</code> and <code>bb3.bin</code>. If neither of these solutions have worked, custom firmware may have been uninstalled in this device before, in a way that makes this exploit not possible to perform. Join the {{ml|Get support|Nintendo Homebrew Discord}} and ask for assistence | ||
#*If the BB3 multihax menu says “cfw installed already”, you already have custom firmware and should continue from [[3dsguide:checking-for-cfw|here]] | #*If the BB3 multihax menu says “cfw installed already”, you already have custom firmware and should continue from [[3dsguide:checking-for-cfw|here]] | ||
#Use the D-Pad to navigate and press the (A) button to select “Install unSAFE_MODE” | #Use the D-Pad to navigate and press the (A) button to select “Install unSAFE_MODE” | ||
| Line 55: | Line 55: | ||
#Ensure that all three connections are named “Haaaaaaaxxxxxxxxx…” | #Ensure that all three connections are named “Haaaaaaaxxxxxxxxx…” | ||
#*Do NOT change these settings! | #*Do NOT change these settings! | ||
#*If all three connections are NOT all named “Haaaaaaaxxxxxxxxx…”, STOP! Something went wrong in this section and MUST be fixed before you can continue. Join the | #*If all three connections are NOT all named “Haaaaaaaxxxxxxxxx…”, STOP! Something went wrong in this section and MUST be fixed before you can continue. Join the {{ml|Get support|Nintendo Homebrew Discord}} and ask for support | ||
#Power off your console | #Power off your console | ||
| Line 91: | Line 91: | ||
===Section V - Restoring WiFi Configuration Profiles=== | ===Section V - Restoring WiFi Configuration Profiles=== | ||
In this section, you will trigger the | In this section, you will trigger the Bannerbomb3 exploit a second time so that you can restore the Wi-Fi connection slots that were overwritten in Section II. | ||
#Launch System Settings on your console | #Launch System Settings on your console | ||