|
| 1 | +# Installing boot9strap (MSET9 CLI iOS) |
| 2 | + |
| 3 | +::: details Technical Details (optional) |
| 4 | + |
| 5 | +[MSET9](https://github.com/zoogie/MSET9) is an exploit for the System Settings application developed by [zoogie](https://github.com/zoogie). It exploits a flaw where the ID1 (the second 32-character folder name inside of the Nintendo 3DS folder, inside of the ID0) can be *any* name as long as it is 32 characters. Performing a specific sequence of actions results in the console executing the instructions that are encoded into the ID1 folder name, which can be used to grant full control over the 3DS. |
| 6 | + |
| 7 | +::: |
| 8 | + |
| 9 | +## Compatibility Notes |
| 10 | + |
| 11 | +::: warning |
| 12 | + |
| 13 | +This page requires an iPhone or iPad running iOS/iPadOS 14.0 or higher. If you have a computer running Windows, macOS, or Linux, follow [Installing boot9strap (MSET9 CLI)](installing-boot9strap-(mset9-cli)) instead. If you have an Android phone/tablet or a Chromebook, follow [Installing boot9strap (MSET9 Play Store)](installing-boot9strap-(mset9-play-store)) instead. If you do not have access to any of these devices, you will need to use an [alternate exploit](https://wiki.hacks.guide/wiki/3DS:Alternate_Exploits). |
| 14 | + |
| 15 | +::: |
| 16 | + |
| 17 | +## What You Need |
| 18 | + |
| 19 | +* [iSH](https://apps.apple.com/us/app/ish-shell/id1436902243) from App Store |
| 20 | + |
| 21 | +## Instructions |
| 22 | + |
| 23 | +::: info |
| 24 | + |
| 25 | +On this page, you will use the MSET9 script, which is used to trigger MSET9. While the script is in progress, user data will temporarily disappear but will return upon the completion of this page. If you get an error when running the script, the solution to that error can most likely be found on the [troubleshooting](troubleshooting-mset9) page. |
| 26 | + |
| 27 | +::: |
| 28 | + |
| 29 | +### Section I - Prep Work |
| 30 | + |
| 31 | +In this section, you will prepare the MSET9 exploit by **temporarily** creating a new HOME Menu profile with no user data, and then setting up that profile with only the minimum data required for MSET9 to trigger. Your existing user data will disappear, but will come back when you are finished with this page. |
| 32 | + |
| 33 | +1. Insert your SD card into your iPhone/iPad |
| 34 | +<!--@include: ./_include/ish-chorus.md --> |
| 35 | + ::: info |
| 36 | + |
| 37 | +  |
| 38 | + |
| 39 | + ::: |
| 40 | + |
| 41 | +1. Type the number corresponding to your console model and version, then tap Return |
| 42 | + + The screen should change to this: |
| 43 | + |
| 44 | + ::: info |
| 45 | + |
| 46 | +  |
| 47 | + |
| 48 | + ::: |
| 49 | + |
| 50 | + + Ensure that the correct console model and version is displayed |
| 51 | +1. Type `1`, then tap Return to begin the process of creating the MSET9 ID1 |
| 52 | +1. After reviewing the disclaimer, type `1` again and tap Return to accept it |
| 53 | + + If you get an error, check the [troubleshooting](troubleshooting-mset9), then try again |
| 54 | +1. If you see the message "Created hacked ID1.", tap Return to close the MSET9 script |
| 55 | + + Your 3DS will appear to have no data / no user-installed apps on HOME Menu. **This is expected.** Your data will come back at a later step |
| 56 | +1. Reinsert your SD card into your console |
| 57 | +1. Power on your console |
| 58 | +1. Open Mii Maker |
| 59 | +1. Wait for your console to reach the [Welcome to Mii Maker](/images/screenshots/mset9/mii-welcome.png) screen, then exit Mii Maker and return to the HOME Menu |
| 60 | + + You may see [this screen](/images/screenshots/mset9/mii-extdata.png), which indicates the necessary data has been created |
| 61 | + + If you just reach the [normal](/images/screenshots/mset9/mii-existing.png) Mii Maker screen, then the data already exists. Exit Mii Maker and return to the HOME Menu |
| 62 | +1. Launch System Settings and navigate to `Data Management` -> `Nintendo 3DS` -> `Software` -> Reset ([image](/images/screenshots/database-reset.jpg)) |
| 63 | + + This will not wipe any of your data |
| 64 | +1. Power off your console by pressing the power button then tapping Power Off on the lower screen |
| 65 | +1. Insert your SD card into your iPhone/iPad |
| 66 | +<!--@include: ./_include/ish-chorus.md --> |
| 67 | +1. Type the number corresponding to your console model and version, then tap Return |
| 68 | + + The screen should change to this and display `Ready`: |
| 69 | + |
| 70 | + ::: info |
| 71 | + |
| 72 | +  |
| 73 | + |
| 74 | + ::: |
| 75 | + |
| 76 | + + If the screen says [Not ready - check MSET9 status for more details](/images/screenshots/mset9/mset9-ish-not-ready.png): |
| 77 | + + Type `2`, then tap Return to check the MSET9 status and follow the directions indicated |
| 78 | + + Once you have resolved the issue, return to Section I Step 14 |
| 79 | + + For more information, check the [troubleshooting](troubleshooting-mset9) page |
| 80 | +1. Type `0`, then tap Return to close the script |
| 81 | +1. Reinsert your SD card into your console |
| 82 | + |
| 83 | +### Section II - MSET9 |
| 84 | + |
| 85 | +In this section, you will trigger MSET9 to launch SafeB9SInstaller (the custom firmware installer). |
| 86 | + |
| 87 | +::: danger |
| 88 | + |
| 89 | +These instructions must be followed **EXACTLY**, so double-check EVERYTHING you are doing to avoid errors! |
| 90 | + |
| 91 | +::: |
| 92 | + |
| 93 | +1. Power on your console, ensuring System Settings is selected |
| 94 | + + If System Settings is not selected, **[hover over](/images/screenshots/mset9/hover-settings.png)** the System Settings icon using the D-Pad, power your console off, then back on |
| 95 | +1. Press (A) to launch System Settings |
| 96 | +1. Navigate to `Data Management` -> `Nintendo 3DS` -> `Extra Data` ([image](/images/screenshots/mset9/settings-extdata.png)) |
| 97 | +1. **Do not press any buttons or touch the screen** |
| 98 | +1. **With the console STILL ON, and without pressing any buttons or touching the screen**, remove your SD card from your console |
| 99 | + + The menu will refresh and say that no SD card is inserted |
| 100 | +1. Insert your SD card into your iPhone/iPad |
| 101 | +<!--@include: ./_include/ish-chorus.md --> |
| 102 | +1. Type the number corresponding to your console model and version, then tap Return |
| 103 | +1. In the MSET9 screen, type `3`, then tap Return to inject MSET9 |
| 104 | + + You should see "MSET9 successfully injected!" |
| 105 | +1. Tap Return to close the MSET9 script |
| 106 | +1. Reinsert your SD card into your console **without pressing any buttons or touching the screen** |
| 107 | +1. If the exploit was successful, you will have booted into SafeB9SInstaller |
| 108 | + + If you get a red screen or the console gets stuck on a loading screen, follow the [troubleshooting guide](troubleshooting-mset9) |
| 109 | + |
| 110 | +### Section III - Installing boot9strap |
| 111 | + |
| 112 | +In this section, you will install custom firmware onto your console. |
| 113 | + |
| 114 | +1. When prompted, input the key combo given on the top screen to install boot9strap |
| 115 | + + If a step on the lower screen has red-colored text, and you are not prompted to input a key combo, [follow this troubleshooting guide](troubleshooting-mset9) |
| 116 | +1. Once it is complete, press (A) to reboot your console |
| 117 | +<!--@include: ./_include/configure-luma3ds.md --> |
| 118 | + |
| 119 | +### Section IV - Removing MSET9 |
| 120 | + |
| 121 | +In this section, you will remove MSET9 to prevent further issues and to restore your user data (games, themes, etc). (This will not remove the custom firmware that you have just installed.) |
| 122 | + |
| 123 | +::: danger |
| 124 | + |
| 125 | +Do NOT skip this section! If you skip it, applications may crash unexpectedly and you will encounter errors on the next page! |
| 126 | + |
| 127 | +::: |
| 128 | + |
| 129 | +1. Power off your console |
| 130 | +1. Insert your SD card into your iPhone/iPad |
| 131 | +<!--@include: ./_include/ish-chorus.md --> |
| 132 | +1. Type the number corresponding to your console model and version, then tap Return |
| 133 | + + The current state should display [Injected](/images/screenshots/mset9/mset9-ish-injected.png) |
| 134 | + + If you have already removed the trigger file (or never injected in the first place), the current state will show [Ready](/images/screenshots/mset9/mset9-ish-ready.png), skip to Step 6 |
| 135 | +1. Type `4`, then tap Return to remove the trigger file |
| 136 | + + You should see "Removed trigger file." |
| 137 | +1. Type `5`, then tap Return to remove MSET9 |
| 138 | + + You should see "Successfully removed MSET9!" |
| 139 | +1. Tap Return to close the MSET9 script |
| 140 | + |
| 141 | +<!--@include: ./_include/luma3ds-installed-note.md --> |
| 142 | + |
| 143 | +___ |
| 144 | + |
| 145 | +::: danger |
| 146 | + |
| 147 | +Did you follow Section IV (Removing MSET9)? That section is MANDATORY! |
| 148 | + |
| 149 | +::: |
| 150 | + |
| 151 | +::: tip |
| 152 | + |
| 153 | +Continue to [Finalizing Setup](finalizing-setup) |
| 154 | + |
| 155 | +::: |
0 commit comments