1
0
mirror of https://github.com/hacks-guide/Guide_3DS.git synced 2025-08-29 03:09:53 +02:00

Deploying to gh-pages from @ hacks-guide/Guide_3DS@bb1ba2b7f0 🚀

This commit is contained in:
lifehackerhansol
2023-07-26 14:40:57 +00:00
parent c97f37c266
commit a01a4ea66e
319 changed files with 1836 additions and 1857 deletions

View File

@@ -487,13 +487,12 @@ window.cookieconsent.initialise({
<ul class="toc__menu" id="markdown-toc">
<li><a href="#兼容性注意" id="markdown-toc-兼容性注意">兼容性注意</a></li>
<li><a href="#你需要准备点啥" id="markdown-toc-你需要准备点啥">你需要准备点啥?</a> <ul>
<li><a href="#section-i---hardware-button-check-target-3ds" id="markdown-toc-section-i---hardware-button-check-target-3ds">Section I - Hardware Button Check (target 3DS)</a></li>
<li><a href="#section-ii---prep-work-source-3ds" id="markdown-toc-section-ii---prep-work-source-3ds">Section II - Prep Work (source 3DS)</a></li>
<li><a href="#section-iii---prep-work-target-3ds" id="markdown-toc-section-iii---prep-work-target-3ds">Section III - Prep Work (target 3DS)</a></li>
<li><a href="#section-iv---kartdlphax" id="markdown-toc-section-iv---kartdlphax">Section IV - kartdlphax</a></li>
<li><a href="#section-v---unsafe_mode" id="markdown-toc-section-v---unsafe_mode">Section V - unSAFE_MODE</a></li>
<li><a href="#section-vi---installing-boot9strap" id="markdown-toc-section-vi---installing-boot9strap">Section VI - Installing boot9strap</a></li>
<li><a href="#section-vii---restoring-wifi-configuration-profiles" id="markdown-toc-section-vii---restoring-wifi-configuration-profiles">Section VII - Restoring WiFi Configuration Profiles</a></li>
<li><a href="#section-i---prep-work-source-3ds" id="markdown-toc-section-i---prep-work-source-3ds">Section I - Prep Work (source 3DS)</a></li>
<li><a href="#section-ii---prep-work-target-3ds" id="markdown-toc-section-ii---prep-work-target-3ds">Section II - Prep Work (target 3DS)</a></li>
<li><a href="#section-iii---kartdlphax" id="markdown-toc-section-iii---kartdlphax">Section III - kartdlphax</a></li>
<li><a href="#section-iv---installing-menuhax67" id="markdown-toc-section-iv---installing-menuhax67">Section IV - Installing menuhax67</a></li>
<li><a href="#第五步--安装-boot9strap" id="markdown-toc-第五步--安装-boot9strap">第五步 安装 boot9strap</a></li>
<li><a href="#section-vi---removing-menuhax67" id="markdown-toc-section-vi---removing-menuhax67">Section VI - Removing menuhax67</a></li>
</ul>
</li>
<li><a href="#继续至完成安装" id="markdown-toc-继续至完成安装">继续至完成安装</a></li>
@@ -505,15 +504,15 @@ window.cookieconsent.initialise({
<details class="notice--info">
<summary><em>技术细节(选看)</em></summary>
<p>In order to exploit the SAFE_MODE firmware of our system, we need to inject an exploited WiFi profile.</p>
<p>In order to install custom firmware on our console, we need to get Homebrew Launcher access.</p>
<p>为了做到这一点,我们将用一台已安装了自制固件的 3DS 安装一个插件,然后利用马里奥赛车 7 这个游戏中的下载通信功能进行一些操作。</p>
<p>This custom plugin will send a hacked payload to an unhacked console, which then exploits the system in order to inject the exploited WiFi profile into your connections list.</p>
<p>This custom plugin will send a hacked payload to an unhacked console, which then exploits the system in order to inject menuhax67, which will allow us to get Homebrew Launcher access.</p>
<p>Once the WiFi profile has been injected, we will use SAFE_MODE, which is a recovery feature present on all 3DS consoles, to activate the exploited WiFi profile.</p>
<p>Once we have Homebrew Launcher access, we can run nimdsphax to install boot9strap.</p>
<p>For a more technical explanation, see the following links for information on the kartdlphax and unSAFE_MODE exploits: <a href="https://github.com/PabloMK7/kartdlphax">kartdlphax</a>, <a href="https://github.com/zoogie/unSAFE_MODE/">unSAFE_MODE</a>.</p>
<p>See <a href="https://github.com/PabloMK7/kartdlphax">here</a> for information about kartdlphax, <a href="https://github.com/zoogie/menuhax67">here</a> for information about menuhax67, and <a href="https://github.com/luigoalma/nimdsphax">here</a> for information about nimdsphax.</p>
</details>
@@ -522,13 +521,13 @@ window.cookieconsent.initialise({
<p>如果你想通过此方法安装自制固件,则你需要:</p>
<ul>
<li>一台已安装自制固件的 3DS <strong> 3DS</strong>),它与你要破解的主机(<strong>目标 3DS</strong>)系统为同一区域
<li>A second 3DS with custom firmware (the <strong>source 3DS</strong>) that is the same region as the 3DS you are trying to modify (the <strong>target 3DS</strong>)
<ul>
<li>必须是美版、日版或欧版机</li>
<li>The consoles must be USA, JPN, or EUR region consoles</li>
<li>The source 3DS can be <a href="region-changing">region changed</a> to match the target 3DS if necessary</li>
</ul>
</li>
<li>一份与两台主机同区的马里奥赛车 7 实体版或数字版</li>
<li>A physical or digital copy of Mario Kart 7 that is the same region as both consoles</li>
<li>An SD card for both consoles</li>
</ul>
@@ -536,28 +535,14 @@ window.cookieconsent.initialise({
<ul>
<li>最新版本的 <a href="https://github.com/PabloMK7/kartdlphax/releases/latest">kartdlphax</a>(下载 <code class="language-plaintext highlighter-rouge">plugin.3gx</code></li>
<li>最新版本的 <a href="https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip">boot9strap</a>(直链)</li>
<li>最新版本的 <a href="https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip">SafeB9SInstaller</a>(直链)</li>
<li>The latest release of <a href="https://github.com/luigoalma/nimdsphax/releases/download/v1.0/nimdsphax_v1.0.zip">nimdsphax</a> (direct download)</li>
<li>The latest release of <a href="https://github.com/zoogie/menuhax67/releases/latest">menuhax67</a></li>
<li>最新版本的 <a href="https://github.com/LumaTeam/Luma3DS/releases/latest">Luma3DS</a>(下载 Luma3DS <code class="language-plaintext highlighter-rouge">.zip</code> 文件)</li>
<li>The latest release of <a href="https://github.com/zoogie/unSAFE_MODE/releases/latest">unSAFE_MODE</a> (the RELEASE <code class="language-plaintext highlighter-rouge">.zip</code> file)</li>
</ul>
<h4 id="section-i---hardware-button-check-target-3ds">Section I - Hardware Button Check (target 3DS)</h4>
<p>In this section, you will see whether your shoulder buttons are working on your console. This will determine which method you will follow on the next page.</p>
<ol>
<li>Power on your console</li>
<li>Once you see the HOME Menu, press the (Left Shoulder) and (Right Shoulder) buttons at the same time
<ul>
<li>The camera applet should appear</li>
</ul>
</li>
<li>Power off your console</li>
</ol>
<p class="notice--warning">If the camera does not open, you cannot follow this method. If this is the case, join <a href="https://discord.gg/MWxPgEp">Nintendo Homebrew on Discord</a> and ask, in English, for help.</p>
<h4 id="section-ii---prep-work-source-3ds">Section II - Prep Work (source 3DS)</h4>
<h4 id="section-i---prep-work-source-3ds">Section I - Prep Work (source 3DS)</h4>
<p>为了向目标 3DS 传输带有漏洞的数据,你将需要按照以下内容配置源 3DS已安装了自制固件的 3DS</p>
@@ -570,39 +555,48 @@ window.cookieconsent.initialise({
</li>
<li>复制 kartdlphax 的 <code class="language-plaintext highlighter-rouge">plugin.3gx</code><strong>源3DS</strong> 的 SD 卡上对应你所拥有的马里奥赛车 7 区域版本的文件夹:
<ul>
<li>美版: <code class="language-plaintext highlighter-rouge">luma/plugins/0004000000030800</code></li>
<li>欧版: <code class="language-plaintext highlighter-rouge">luma/plugins/0004000000030700</code></li>
<li>日版: <code class="language-plaintext highlighter-rouge">luma/plugins/0004000000030600</code>
如果 <code class="language-plaintext highlighter-rouge">plugins</code> <code class="language-plaintext highlighter-rouge">00040000...</code> 文件夹不存在,请先创建它们</li>
<li>USA: <code class="language-plaintext highlighter-rouge">luma/plugins/0004000000030800</code></li>
<li>EUR: <code class="language-plaintext highlighter-rouge">luma/plugins/0004000000030700</code></li>
<li>JPN: <code class="language-plaintext highlighter-rouge">luma/plugins/0004000000030600</code></li>
<li>Create the <code class="language-plaintext highlighter-rouge">plugins</code> and <code class="language-plaintext highlighter-rouge">00040000...</code> folders if they do not already exist</li>
</ul>
</li>
<li>弹出 SD 卡并将其插回<strong>源 3DS</strong></li>
</ol>
<h4 id="section-iii---prep-work-target-3ds">Section III - Prep Work (target 3DS)</h4>
<h4 id="section-ii---prep-work-target-3ds">Section II - Prep Work (target 3DS)</h4>
<p>In this section, you will copy the files needed to trigger the unSAFE_MODE exploit onto your target 3DS (the 3DS that you are trying to modify)s SD card.</p>
<p>In this section, you will set up the files that the target 3DS will need to install custom firmware.</p>
<ol>
<li>在你的电脑中插入你的<strong>目标 3DS</strong> 的 SD 卡</li>
<li>Copy <code class="language-plaintext highlighter-rouge">boot.firm</code> and <code class="language-plaintext highlighter-rouge">boot.3dsx</code> from the Luma3DS <code class="language-plaintext highlighter-rouge">.zip</code> to the root of the <strong>target 3DSs</strong> SD card</li>
<li>在 SD 卡根目录创建一个名为 <code class="language-plaintext highlighter-rouge">boot9strap</code> 的文件夹</li>
<li>Copy <code class="language-plaintext highlighter-rouge">boot9strap.firm</code> and <code class="language-plaintext highlighter-rouge">boot9strap.firm.sha</code> from the RELEASE <code class="language-plaintext highlighter-rouge">.zip</code> to the <code class="language-plaintext highlighter-rouge">/boot9strap/</code> folder on your SD card</li>
<li>从boot9strap <code class="language-plaintext highlighter-rouge">.zip</code> 文件中复制 <code class="language-plaintext highlighter-rouge">boot9strap.firm</code> <code class="language-plaintext highlighter-rouge">boot9strap.firm.sha</code> 到你SD卡的 <code class="language-plaintext highlighter-rouge">/boot9strap/</code> 文件夹中</li>
<li>从 SafeB9SInstaller <code class="language-plaintext highlighter-rouge">.zip</code> 压缩包中复制 <code class="language-plaintext highlighter-rouge">SafeB9SInstaller.bin</code> 到 SD 卡根目录下</li>
<li>Copy <code class="language-plaintext highlighter-rouge">usm.bin</code> from the RELEASE <code class="language-plaintext highlighter-rouge">.zip</code> to the root of your SD card</li>
<li>Create a folder called <code class="language-plaintext highlighter-rouge">3ds</code> on the root of your SD card</li>
<li>Copy <code class="language-plaintext highlighter-rouge">slotTool.3dsx</code> from the <code class="language-plaintext highlighter-rouge">slotTool</code> folder inside the RELEASE <code class="language-plaintext highlighter-rouge">.zip</code> to the <code class="language-plaintext highlighter-rouge">/3ds/</code> folder on your SD card</li>
<li>检查 SD 卡的根目录是否存在一个名为 <code class="language-plaintext highlighter-rouge">3ds</code> 的文件夹,如果没有则手动新建一个
<ul>
<li>This folder stores homebrew applications and data; it is different from the <code class="language-plaintext highlighter-rouge">Nintendo 3DS</code> folder that the console automatically generates</li>
</ul>
</li>
<li>Copy the <code class="language-plaintext highlighter-rouge">nimdsphax</code> folder from the nimdsphax <code class="language-plaintext highlighter-rouge">.zip</code> to the <code class="language-plaintext highlighter-rouge">/3ds/</code> folder on your SD card</li>
<li>Copy <code class="language-plaintext highlighter-rouge">menuhax67_installer.3dsx</code> from the menuhax <code class="language-plaintext highlighter-rouge">.zip</code> to the <code class="language-plaintext highlighter-rouge">/3ds/</code> folder on your SD card</li>
<li>Copy Launcher.dat from the folder for your model and region inside the menuhax <code class="language-plaintext highlighter-rouge">.zip</code> to the root of your SD card</li>
<li>取下 SD 卡并将其插回<strong>目标 3DS</strong></li>
</ol>
<h4 id="section-iv---kartdlphax">Section IV - kartdlphax</h4>
<p class="notice--info"><img src="https://3ds.hacks.guide/images/screenshots/kart-root-layout.png" alt="" /></p>
<p>In this section, you will use Download Play to transfer the exploit data from the source 3DS to the target 3DS, which can be used to overwrite your Wi-Fi slots with hacked data. Your Wi-Fi connection settings will be temporarily overwritten while the exploit is active.</p>
<p class="notice--info"><img src="https://3ds.hacks.guide/images/screenshots/kart-3ds-layout.png" alt="" /></p>
<h4 id="section-iii---kartdlphax">Section III - kartdlphax</h4>
<p>In this section, you will use Download Play to transfer the exploit data from the source 3DS to the target 3DS, which can be used to install menuhax67, a Homebrew Launcher entrypoint. Your HOME Menu settings will be temporarily inaccessible on the target 3DS while this exploit is active.</p>
<ol>
<li>启动 **源 3DS **
<ul>
<li>若主机提示设置 Luma3DS则你可以直接按下 START 键来保存配置</li>
<li>If you are prompted to set up Luma3DS, just press START to save the configuration</li>
</ul>
</li>
<li>进入主菜单后,同时按下 “L” + “↓” + “Select” 键调出 Rosalina 菜单</li>
@@ -610,13 +604,13 @@ window.cookieconsent.initialise({
<li>按 “B” 键退出 Rosalina 菜单</li>
<li>启动马里奥赛车 7
<ul>
<li>请确保你已经打开了无线连接</li>
<li>Ensure that wireless connectivity is enabled</li>
</ul>
</li>
<li>选择 <code class="language-plaintext highlighter-rouge">本地多人游戏Local Multiplayer</code> 一个菜单应该会弹出来
<ul>
<li>If the screen freezes, hold the power button for fifteen seconds to force power off your console, then try again</li>
<li>如果你先前已经启动过了 kartdlphax则最后选定的设置将会被加载。 如果一切正确,请选中 <code class="language-plaintext highlighter-rouge">Use settings</code> 然后跳过接下来的 3 个小步骤。 如果不对,请选择 <code class="language-plaintext highlighter-rouge">Change settings</code> 然后继续操作。</li>
<li>If you have launched kartdlphax previously, the last selected settings will be loaded. 如果一切正确,请选中 <code class="language-plaintext highlighter-rouge">Use settings</code> 然后跳过接下来的 3 个小步骤。 如果不对,请选择 <code class="language-plaintext highlighter-rouge">Change settings</code> 然后继续操作。</li>
</ul>
</li>
<li>Select your <strong>target 3DS</strong> console type (Old 3DS family or New 3DS family)</li>
@@ -628,17 +622,17 @@ window.cookieconsent.initialise({
</li>
<li>确认菜单将会显示。 如果上屏显示的设置一切正确,请选中 <code class="language-plaintext highlighter-rouge">Use settings</code>
<ul>
<li>如果不正确,请选择 <code class="language-plaintext highlighter-rouge">Change settings</code> 然后进行相应的修改</li>
<li>If the settings are not correct, press <code class="language-plaintext highlighter-rouge">Change settings</code> and modify them accordingly</li>
</ul>
</li>
<li>选择 <code class="language-plaintext highlighter-rouge">Create Group</code>
<ul>
<li>如果你用的是游戏卡带,且源 3DS 此时卡住了,那么请尝试 <a href="dumping-titles-and-game-cartridges#installing-a-game-cartridge-directly-to-the-system">将卡带中的游戏安装到系统中</a></li>
<li>If the source 3DS freezes at this point and you are using a cartridge, try <a href="dumping-titles-and-game-cartridges#installing-a-game-cartridge-directly-to-the-system">installing the cartridge to the system</a></li>
</ul>
</li>
<li>启动**目标 3DS **
<ul>
<li>请确保你已经打开了无线连接</li>
<li>Ensure that wireless connectivity is enabled</li>
</ul>
</li>
<li><strong>目标 3DS</strong>打开下载通信Download Play应用 (<img src="https://3ds.hacks.guide/images/download-play-icon.png" alt="" height="24px" width="24px" />),然后选择 “Nintendo 3DS”</li>
@@ -648,48 +642,35 @@ window.cookieconsent.initialise({
<li>稍等一会儿(百分比应该会显示在<strong>源 3DS</strong> 上)</li>
<li>如果漏洞执行成功,<strong>目标 3DS</strong> 将会启动 3DS ROP xPloit Injector
<ul>
<li>如果漏洞没有成功触发,则请将<strong> 3DS</strong> <strong>目标 3DS</strong> 一起关机,然后从 <code class="language-plaintext highlighter-rouge">第三步 — kartdlphax</code> 重新开始</li>
</ul>
</li>
<li>Press (X) to inject unSAFE_MODE</li>
<li>If the injection was successful, the screen will turn green and the <strong>target 3DS</strong> will automatically power off
<ul>
<li>If the screen turns red, power off the target 3DS and start again from the beginning of <code class="language-plaintext highlighter-rouge">Section III - kartdlphax</code>. If this doesnt work, ask for help at <a href="https://discord.gg/MWxPgEp">Nintendo Homebrew on Discord</a>)</li>
<li>If the exploit was not successful, power off the <strong>source 3DS</strong> and <strong>target 3DS</strong> and start again from the beginning of <code class="language-plaintext highlighter-rouge">Section III - kartdlphax</code></li>
</ul>
</li>
</ol>
<p class="notice--info">You will <strong>not</strong> need to use your <strong>source 3DS</strong> to complete any further steps on this guide. Any further steps should only be completed on the <strong>target 3DS</strong>.</p>
<h4 id="section-v---unsafe_mode">Section V - unSAFE_MODE</h4>
<p>In this section, you will enter Safe Mode (a feature available on all 3DS family consoles) and navigate to a menu where unSAFE_MODE will be triggered, which will launch you into the boot9strap (custom firmware) installer.</p>
<h4 id="section-iv---installing-menuhax67">Section IV - Installing menuhax67</h4>
<ol>
<li>With your console still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your console
<li>Press (Y) + (D-Pad Down) to install menuhax67
<ul>
<li>Keep holding the buttons until the console boots into Safe Mode (a “system update” menu)</li>
<li>The console will automatically power off</li>
</ul>
</li>
<li>Press “OK” to accept the update
<li>Power on your console</li>
<li>Tap on the small HOME Menu settings icon in the top left of the bottom screen (<img src="https://3ds.hacks.guide/images/homemenuicon.png" alt="" height="32px" width="52px" />)
<ul>
<li>There is no update. This is part of the exploit</li>
<li>If the console freezes for a while and then crashes, make sure you have Launcher.dat on the root of your SD card</li>
</ul>
</li>
<li>Press “I accept” to accept the terms and conditions</li>
<li>The update will eventually fail, with the error code <code class="language-plaintext highlighter-rouge">003-1099</code>. This is intended behaviour</li>
<li>When asked “Would you like to configure Internet settings?”, select “Yes”</li>
<li>On the following menu, navigate to <code class="language-plaintext highlighter-rouge">Connection 1</code> -&gt; <code class="language-plaintext highlighter-rouge">Change Settings</code> -&gt; <code class="language-plaintext highlighter-rouge">Next Page (right arrow)</code> -&gt; <code class="language-plaintext highlighter-rouge">Proxy Settings</code> -&gt; <code class="language-plaintext highlighter-rouge">Detailed Setup</code> (<a href="/images/screenshots/usm/safemode_highlighted.png">image</a>)</li>
<li>If the exploit was successful, your console will have booted into SafeB9SInstaller
<li>If the exploit was successful, your console will have booted into the Homebrew Launcher</li>
<li>Launch nimdsphax from the list of homebrew</li>
<li>如果一切成功的话,你将自动进入 SafeB9SInstaller
<ul>
<li>If your console instead freezes on a white screen, hold the POWER button until it turns off, then retry this section</li>
<li>If your console instead freezes on a red screen, you are missing <code class="language-plaintext highlighter-rouge">usm.bin</code> from the root of your SD card</li>
<li>If you get a different error, <a href="troubleshooting#installing-boot9strap-usm">follow this troubleshooting guide</a></li>
<li>If your console freezes on a red screen, hold the POWER button until it turns off, then try running menuhax again by powering on your console and tapping on the HOME Menu settings icon</li>
</ul>
</li>
</ol>
<h4 id="section-vi---installing-boot9strap">Section VI - Installing boot9strap</h4>
<h4 id="第五步--安装-boot9strap">第五步 安装 boot9strap</h4>
<p>In this section, you will install custom firmware onto your console.</p>
@@ -716,9 +697,9 @@ window.cookieconsent.initialise({
<li>On the next page, you will install useful homebrew applications to complete your setup.</li>
</ul>
<h4 id="section-vii---restoring-wifi-configuration-profiles">Section VII - Restoring WiFi Configuration Profiles</h4>
<h4 id="section-vi---removing-menuhax67">Section VI - Removing menuhax67</h4>
<p>In this section, you will enter the Homebrew Launcher (using custom firmware) so that you can restore the Wi-Fi connection slots that were overwritten in Section I.</p>
<p>In this section, you will use the Homebrew Launcher to remove menuhax67, which will let you access the HOME Menu Settings option normally.</p>
<ol>
<li>启动“下载通信(Download Play)”程序 (<img src="https://3ds.hacks.guide/images/download-play-icon.png" alt="" height="24px" width="24px" />)</li>
@@ -737,9 +718,9 @@ window.cookieconsent.initialise({
<li>If your console is stuck on the loading splash screen, you are missing <code class="language-plaintext highlighter-rouge">boot.3dsx</code> from the root of your SD card</li>
</ul>
</li>
<li>Launch slotTool from the list of homebrew</li>
<li>Select RESTORE original wifi slots 1,2,3”</li>
<li>Your console will then reboot</li>
<li>Launch menuhax67_installer from the list of homebrew</li>
<li>Select REMOVE menuhax67</li>
<li>When you see “done.”, press (A), then press (A) on “EXIT to menu”</li>
</ol>
<hr />