Skip to content

Installing boot9strap (MSET9 CLI)

Technical Details (optional)

MSET9 is an exploit for the System Settings application developed by zoogie. It exploits a flaw where the ID1 (the second 32-character folder name inside of the Nintendo 3DS folder, inside of the ID0) can be any name as long as it is 32 characters. Performing a specific sequence of actions results in the console executing the instructions that are encoded into the ID1 folder name, which can be used to grant full control over the 3DS.

Compatibility Notes

WARNING

This page requires a computer running Windows, Linux, or macOS. If you have an Android phone/tablet or a Chromebook, follow Installing boot9strap (MSET9 Play Store) instead. If you do not have access to any of these devices, you will need to use an alternate exploit.

What You Need

  • The latest release of MSET9
  • Any 3.x version of Python installed on your computer
    • If you are on Linux or macOS, you may already have Python 3. Check by opening a Terminal window and entering python3 -V. If this returns a version number, it will work for this guide.

Instructions

INFO

On this page, you will use the MSET9 script, which is used to trigger MSET9. While the script is in progress, user data will temporarily disappear but will return upon the completion of this page. If you get an error when running the script, the solution to that error can most likely be found on the troubleshooting page.

Section I - Prep Work

In this section, you will prepare the MSET9 exploit by temporarily creating a new HOME Menu profile with no user data, and then setting up that profile with only the minimum data required for MSET9 to trigger. Your existing user data will disappear, but will come back when you are finished with this page.

  1. Insert your SD card into your computer

  2. Copy everything from the MSET9 .zip to the root of your SD card, overwriting any existing files

    INFO

  3. Run the MSET9 script:

    • Windows: Double-click MSET9-Windows.bat
    • macOS: Double-click MSET9-macOS.command and enter your password if prompted
    • Linux: open a Terminal window, cd to the root of your SD card, then type python3 mset9.py and press Enter

    INFO

  4. Type the number corresponding to your console model and version, then press Enter

    • The window should change to this:

    INFO

    • Ensure that the correct console model and version is displayed
  5. Type 1, then press Enter to begin the process of creating the MSET9 ID1

  6. After reviewing the disclaimer, type 1 again and press Enter to accept it

  7. If you see the message "Created hacked ID1.", press Enter to close the MSET9 script

    • Your 3DS will appear to have no data / no user-installed apps on HOME Menu. This is expected. Your data will come back at a later step
  8. Reinsert your SD card into your console

  9. Power on your console

  10. Open Mii Maker

  11. Wait for your console to reach the Welcome to Mii Maker screen, then exit Mii Maker and return to the HOME Menu

    • You may see this screen, which indicates the necessary data has been created
    • If you just reach the normal Mii Maker screen, then the data already exists. Exit Mii Maker and return to the HOME Menu
  12. Launch System Settings and navigate to Data Management -> Nintendo 3DS -> Software -> Reset (image)

    • This will not wipe any of your data
  13. Power off your console by pressing the power button then tapping Power Off on the lower screen

  14. Insert your SD card into your computer

  15. Run the MSET9 script:

    • Windows: Double-click MSET9-Windows.bat
    • macOS: Double-click MSET9-macOS.command and enter your password if prompted
    • Linux: open a Terminal window, cd to the root of your SD card, then type python3 mset9.py and press Enter
  16. Type the number corresponding to your console model and version, then press Enter

    • The window should change to this and display Ready:

    INFO

  17. Type 0, then press Enter to close the script

  18. Reinsert your SD card into your console

Section II - MSET9

In this section, you will trigger MSET9 to launch SafeB9SInstaller (the custom firmware installer).

DANGER

These instructions must be followed EXACTLY, so double-check EVERYTHING you are doing to avoid errors!

  1. Power on your console, ensuring System Settings is selected
    • If System Settings is not selected, hover over the System Settings icon using the D-Pad, power your console off, then back on
  2. Press (A) to launch System Settings
  3. Navigate to Data Management -> Nintendo 3DS -> Extra Data (image)
  4. Do not press any buttons or touch the screen
  5. With the console STILL ON, and without pressing any buttons or touching the screen, remove your SD card from your console
    • The menu will refresh and say that no SD card is inserted
  6. Insert your SD card into your computer
  7. Run the MSET9 script:
    • Windows: Double-click MSET9-Windows.bat
    • macOS: Double-click MSET9-macOS.command and enter your password if prompted
    • Linux: open a Terminal window, cd to the root of your SD card, then type python3 mset9.py and press Enter
  8. Type the number corresponding to your console model and version, then press Enter
  9. In the MSET9 window, type 3, then press Enter to inject MSET9
    • You should see "MSET9 successfully injected!"
  10. Press Enter to close the MSET9 script
  11. Reinsert your SD card into your console without pressing any buttons or touching the screen
  12. If the exploit was successful, you will have booted into SafeB9SInstaller

Section III - Installing boot9strap

In this section, you will install custom firmware onto your console.

  1. When prompted, input the key combo given on the top screen to install boot9strap
  2. Once it is complete, press (A) to reboot your console
  3. Your console should have booted into the Luma3DS configuration menu
    • Luma3DS configuration menu are settings for the Luma3DS custom firmware. Many of these settings may be useful for customization or debugging
    • For the purpose of this guide, leave these options on the default settings (do not check or uncheck anything)
    • If your console shuts down when you try to power it on, ensure that you have copied boot.firm from the Luma3DS .zip to the root of your SD card
  4. Press (Start) to save and reboot

Section IV - Removing MSET9

In this section, you will remove MSET9 to prevent further issues and to restore your user data (games, themes, etc). (This will not remove the custom firmware that you have just installed.)

DANGER

Do NOT skip this section! If you skip it, applications may crash unexpectedly and you will encounter errors on the next page!

  1. Power off your console
  2. Insert your SD card into your computer
  3. Run the MSET9 script:
    • Windows: Double-click MSET9-Windows.bat
    • macOS: Double-click MSET9-macOS.command and enter your password if prompted
    • Linux: open a Terminal window, cd to the root of your SD card, then type python3 mset9.py and press Enter
  4. Type the number corresponding to your console model and version, then press Enter
    • The current state should display Injected
    • If you have already removed the trigger file (or never injected in the first place), the current state will show Ready, skip to Step 6
  5. Type 4, then press Enter to remove the trigger file
    • You should see "Removed trigger file."
  6. Type 5, then press Enter to remove MSET9
    • You should see "Successfully removed MSET9!"
  7. Press Enter to close the MSET9 script

At this point, your console will boot to Luma3DS by default.

  • Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
  • On the next page, you will install useful homebrew applications to complete your setup.

DANGER

Did you follow Section IV (Removing MSET9)? That section is MANDATORY!

TIP

Continue to Finalizing Setup