kartdlphax - A Mario Kart 7 semi-primary exploit
​

kartdlphax is a semiprimary exploit for the download play mode of Mario Kart 7. It can be used to run an userland payload in an unmodified 3DS by having it connect through download play to another 3DS with Custom Firmware running the exploit.

​

Installation
The exploit uses a 3GX Plugin in the host system. Therefore, in order to use this exploit you need to install the 3GX Loader Luma3DS fork.

In the host console, place the .3gx file from the Releases page in the following directories depending on your game region:

• EUR: luma/plugins/0004000000030700
• JAP: luma/plugins/0004000000030600
• USA: luma/plugins/0004000000030800

By default, the plugin will use the built-in otherapp payload (universal-otherap). You can place your own otherapp at /kartdlphax_otherapp.bin, but keep in mind that the hax 2.0 otherapp doesn't work currently.

Usage

1. On the host 3ds, make sure the plugin loader is enabled from the Rosalina menu (L+Down+Select), then launch the Mario Kart 7 game matching the region of the client 3ds(es). (You will see a confirmation message in the top screen once the game launches).
   
   
2. On the client 3ds(es), launch the download play application.
   
   
3. On the host 3ds, select Local Multiplayer then Create Group. After that, let the client 3ds(es) join the group.
   
   
4. Once the multiplayer menu loads on the host 3ds, select Grand Prix then 50cc then any driver combination and finally the Mushroom Cup. After a while the exploit will trigger on the client 3ds(es).

Keep in mind that while you can send the exploit to 8 consoles at the same time, the success rate seems to decrease for each console added.

Source & Download

Credits

• 3ds ropkit (by yellows8).
• universal-otherapp (Copyright (c) 2020 TuxSH).
• CTRPF (by Nanquitas).
• nitpic3d's developer luigoalma for his huge help.
• Kartic for his huge help and all the people from his development discord server.

 

[Gamemaster1379]

All models should be supported by browserhax-XL.

Not familiar with that one. Will need to dig in more

 

[Deleted member 323844]

LMFAO this is new, didn't know about it

Yep, it's the easiest/simplest entry-point for 3DS, afaik.

 

[livid_hen]

This just runs the b9s installer, correct? Do we still have to put luma (or some boot.firm) on the sdcard manually?

 

[Hambrew]

kartdlphax - A Mario Kart 7 semi-primary exploit
​

kartdlphax is a semiprimary exploit for the download play mode of Mario Kart 7. It can be used to run an userland payload in an unmodified 3DS by having it connect through download play to another 3DS with Custom Firmware running the exploit.

​

Installation
The exploit uses a 3GX Plugin in the host system. Therefore, in order to use this exploit you need to install the 3GX Loader Luma3DS fork.

In the host console, place the .3gx file from the Releases page in the following directories depending on your game region:

• EUR: luma/plugins/0004000000030700
• JAP: luma/plugins/0004000000030600
• USA: luma/plugins/0004000000030800

(TWN, CHN and KOR regions untested).

By default, the plugin will use the built-in otherapp payload (universal-otherap). You can place your own otherapp at /kartdlphax_otherapp.bin, but keep in mind that the hax 2.0 otherapp doesn't work currently.

Usage

1. On the host 3ds, make sure the plugin loader is enabled from the Rosalina menu (L+Down+Select), then launch the Mario Kart 7 game matching the region of the client 3ds(es). (You will see a confirmation message in the top screen once the game launches).
   
   
2. On the client 3ds(es), launch the download play application.
   
   
3. On the host 3ds, select Local Multiplayer then Create Group. After that, let the client 3ds(es) join the group.
   
   
4. Once the multiplayer menu loads on the host 3ds, select Grand Prix then 50cc then any driver combination and finally the Mushroom Cup. After a while the exploit will trigger on the client 3ds(es).

Keep in mind that while you can send the exploit to 8 consoles at the same time, the success rate seems to decrease for each console added.

Source & Download

Credits

• 3ds ropkit (by yellows8).
• universal-otherapp (Copyright (c) 2020 TuxSH).
• CTRPF (by Nanquitas).
• nitpic3d's developer luigoalma for his huge help.
• Kartic for his huge help and all the people from his development discord server.

Hmm... I tried this on my broken-shoulder-buttons New 2DS XL as well as my older brother's New 3DS XL, and both times, it didn't work, just saying to restart the system. Am I supposed to put something on either system's microSD card, or am I missing something?

 

[PabloMK7]

Hmm... I tried this on my broken-shoulder-buttons New 2DS XL as well as my older brother's New 3DS XL, and both times, it didn't work, just saying to restart the system. Am I supposed to put something on either system's microSD card, or am I missing something?

You need SafeB9SInstaller.bin in the SD card of the target system. Try it a few times as it may fail the first tries. If it still doesn't work please describe the screen colors/behaviour to figure out what's going on.

 

[livid_hen]

I am trying to go from O3ds XL to N3ds XL, and It keeps saying "An error has occurred, forcing the software to close. The system will now restart." on the target 3ds, getting no color flashes. Safeb9sinstaller is on the root of the sdcard. Mk7 on the source is installed as an app, because I couldn't open a room using the cart. It just hung there.

 

[Joom]

You know how many people have wondered if something like this was possible for so long? This is what I love about the 3DS scene. It's always like "hold my beer for a couple of years, and I shall return so long as you hold my beer". It really validates all of those that ask these questions, too.

 

[PabloMK7]

I am trying to go from O3ds XL to N3ds XL, and It keeps saying "An error has occurred, forcing the software to close. The system will now restart." on the target 3ds, getting no color flashes. Safeb9sinstaller is on the root of the sdcard. Mk7 on the source is installed as an app, because I couldn't open a room using the cart. It just hung there.

The connection has to be pretty good for data to transfer properly the first time. Also, just wondering, which regions are your consoles?

 

[livid_hen]

The connection has to be pretty good for data to transfer properly the first time. Also, just wondering, which regions are your consoles?

There both US, and they are sitting right next to each other (less than an inch apart). I'll try reformatting the sdcard and try again a few times.

 

[PabloMK7]

There both US, and they are sitting right next to each other (less than an inch). I'll try reformatting the sdcard and try again a few times.

Reformatting the SD card won't have any effect, it's a communication problem.

 

[Deleted member 668561]

Wait, when did 3ds plugins start?


Now we wait for all the 3ds mod menus

 

[livid_hen]

Wait, when did 3ds plugins start?


Now we for all the 3ds mod menus

Not sure exactly sure when, but I think they got big with ctgp7

 

[MultiKoopa]

Wait, when did 3ds plugins start?


Now we for all the 3ds mod menus

didn't they start like several years ago?

 

[Deleted member 668561]

didn't they start like several years ago?

Idk, I've only really used gateway to run cheats

 

[livid_hen]

Reformatting the SD card won't have any effect, it's a communication problem.

Hmmm, you're right, formatting hasn't changed anything. I also can't figure out what would be messing with the connection...

 

[Deleted member 558516]

wow a exploit for 3ds and for my fav game? nice!

 

[PabloMK7]

Hmmm, you're right, formatting hasn't changed anything. I also can't figure out what would be messing with the connection...

Wait, I just checked the code and it looks like the download play application isn't region free afterall.
This exploit right now only works on EUR consoles.

This will be very difficult to fix, as CFW doesn't patch region checks in download play, so I can't run tests in order to implement other regions.

 

[raxadian]

Hmmm, you're right, formatting hasn't changed anything. I also can't figure out what would be messing with the connection...

Did you try a normal download play game to see if it works?

 

[raxadian]

Wait, I just checked the code and it looks like the download play application isn't region free afterall.
This exploit right now only works on EUR consoles.

This will be very difficult to fix, as CFW doesn't patch region checks in download play, so I can't run tests in order to implement other regions.

But it should work if you reset a console to the Euro region; right? And what has to be Euro region, both consoles or just the hacked one?

 

[livid_hen]

This will be very difficult to fix, as CFW doesn't patch region checks in download play, so I can't run tests in order to implement other regions.

I know It's not exactly the same as being there and testing it yourself but i wouldn't be against being a guinea pig ! I wish I had the know-how to help.

Did you try a normal download play game to see if it works?

Yep, works just fine!

But it should work if you reset a console to the Euro region; right? And what has to be Euro region, both consoles or just the hacked one?

Both have to be the same region for download play to let you connect / see the open game.

But it should work if you reset a console to the Euro region; right? And what has to be Euro region, both consoles or just the hacked one?

Both would have to be European to be able to connect in the first place, but from my little understanding of this I think it's going awry on the target console.