Installing boot9strap (MSET9 Play Store)

Technical Details (optional)

MSET9 is an exploit for the System Settings application developed by zoogie. It exploits a flaw where the ID1 (the second 32-character folder name inside of the Nintendo 3DS folder, inside of the ID0) can be any name as long as it is 32 characters. Performing a specific sequence of actions results in the console executing the instructions that are encoded into the ID1 folder name, which can be used to grant full control over the 3DS.

Compatibility Notes

WARNING

This page requires an Android phone/tablet or a Chromebook. If you have a computer running Windows, macOS, or Linux, follow Installing boot9strap (MSET9 CLI) instead. If you do not have access to any of these devices, you will need to use an alternate exploit.

WARNING

On Android phones/tablets, the minimum Android version required is 6.0 (Marshmallow).

What You Need

• The following applications installed from the Google Play Store:
  • MSET9 Installer
  • ZArchiver
  • If you wish, you can sideload these applications instead
• The latest release of MSET9 (the Release .zip file)

Instructions

Section I - Prep Work

In this section, you will prepare the SD card data necessary for the MSET9 exploit to trigger.

1. Insert your SD card into your phone/tablet/computer

2. Copy everything from the Release .zip to the root of your SD card, overwriting any existing files:

   • Open ZArchiver
   • If prompted, allow ZArchiver to access files on your SD card
   • Navigate to where the downloaded MSET9 Release .zip is located (likely in the Downloads folder)
   • Select the Release .zip, then select "Extract..." (image)
   • Navigate to your SD card, then tap the blue 'down arrow' icon to extract the files to the root of your SD card (image)

   INFO

   

3. Run the MSET9 Installer application

4. Tap on Select "Nintendo 3DS" Folder, then navigate to your Nintendo 3DS folder on your SD card (image)

5. Once inside the Nintendo 3DS folder, tap on "Use this folder", then "Allow" if asked (image)

6. If Setup MSET9 is highlighted, proceed to the next step

   • If you get an error, you need to resolve before you can use MSET9. Refer to the troubleshooting

7. Tap on Setup MSET9 to begin the process of setting up MSET9

8. After reviewing the disclaimer, tap on Confirm to accept it

9. Tap on the photo corresponding to your console model, then at the bottom, pick your current firmware version

10. If you see the prompt of Hax ID1 Created, tap OK to continue

    • If you get an error, check the troubleshooting, then try again
    • Your 3DS will appear to lose most data / no user-installed apps on HOME Menu. This is expected. Your data will come back at a later step

11. Reinsert your SD card into your console

12. Power on your console

13. Open Mii Maker

14. Wait for your console to reach the "Welcome to Mii Maker" screen, then exit Mii Maker

    • You may see this screen, which indicates the necessary data has been created
    • If you just reach the normal Mii Maker screen, exit Mii Maker and return to the HOME Menu

15. Launch System Settings and navigate to Data Management -> Nintendo 3DS -> Software -> Reset (image)

    • This will not wipe any of your data

16. Power off your console by pressing the power button then tapping Power Off on the lower screen

17. Insert your SD card into your phone/tablet/computer

18. The MSET9 Installer application should automatically check if you have done previous steps properly

    • It may take a few seconds for the app to detect the SD card and react
    • If it doesn't check automatically, tap Check MSET9 status to check manually
    • If you get an error, check the troubleshooting, then try again

19. If the check passed, you'll see Inject trigger file become highlighted and you can continue to the next step. Do not inject trigger yet. Put your phone/tablet/computer aside for now

20. Reinsert your SD card into your console

Section II - MSET9

In this section, you will trigger MSET9 to launch SafeB9SInstaller (the custom firmware installer).

DANGER

These instructions must be followed EXACTLY, so double-check EVERYTHING you are doing to avoid errors!

1. Power on your console, ensuring System Settings is selected
   • If System Settings is not selected, hover over the System Settings icon using the D-Pad, power your console off, then back on
2. Press (A) to launch System Settings
3. Navigate to Data Management -> Nintendo 3DS -> Extra Data (image)
4. Do not press any buttons or touch the screen
5. With the console STILL ON, and without pressing any buttons or touching the screen, remove your SD card from your console
   • The menu will refresh and say that no SD card is inserted, which is expected
6. Insert your SD card into your phone/tablet/computer
7. Open the MSET9 Installer application
8. Tap Inject trigger file
   • The button should become greyed out and Remove trigger file become highlighted
9. Reinsert your SD card into your console without pressing any buttons or touching the screen
10. If the exploit was successful, you will have booted into SafeB9SInstaller
    • If you get a red screen or the console gets stuck on a loading screen, follow the troubleshooting guide

Section III - Installing boot9strap

In this section, you will install custom firmware onto your console.

1. When prompted, input the key combo given on the top screen to install boot9strap
   • If a step on the lower screen has red-colored text, and you are not prompted to input a key combo, follow this troubleshooting guide
2. Once it is complete, press (A) to reboot your console
3. Your console should have booted into the Luma3DS configuration menu
   • Luma3DS configuration menu are settings for the Luma3DS custom firmware. Many of these settings may be useful for customization or debugging
   • For the purpose of this guide, leave these options on the default settings (do not check or uncheck anything)
   • If your console shuts down when you try to power it on, ensure that you have copied boot.firm from the Luma3DS .zip to the root of your SD card
4. Press (Start) to save and reboot

Section IV - Removing MSET9

In this section, you will remove MSET9 to prevent further issues. (This will not remove the custom firmware that you just installed.)

DANGER

Do NOT skip this section! If you skip it, applications may crash unexpectedly and you will encounter errors on the next page!

1. Power off your console
2. Insert your SD card into your phone/tablet/computer
3. Open the MSET9 Installer application
4. Tap Remove MSET9
5. Close the MSET9 Installer application

At this point, your console will boot to Luma3DS by default.

• Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
• On the next page, you will install useful homebrew applications to complete your setup.

---

DANGER

Did you follow Section IV (Removing MSET9)? That section is MANDATORY!

TIP

Continue to Finalizing Setup