kart*: readd nimhax

needed by kartdlphax

_data/navigation/en_US.yml

@@ -109,6 +109,9 @@ sidebar_pages:
   -
     title: Dumping eShop DSiWare
     url: dumping-eshop-dsiware
+  -
+    title: menuhax67 + nimhax (3DS ROP xPloit Injector)
+    url: menuhax67-nimhax-(3dsropxploitinjector)
   -
     title: menuhax67 + Frogtool (3DS ROP xPloit Injector)
     url: menuhax67-frogtool-(3dsropxploitinjector)

_pages/en_US/menuhax67-nimhax-(3dsropxploitinjector).txt

@@ -0,0 +1,56 @@
+---
+title: "menuhax67 + nimhax (3DS ROP xPloit Injector)"
+---
+
+{% include toc title="Table of Contents" %}
+
+{% capture technical_info %}
+<summary><em>Technical Details (optional)</em></summary>
+
+To install boot9strap on your console, we derive your console's unique encryption key. To accomplish this, we use the Homebrew Launcher to launch nimhax and dump the data encryption key (movable.sed) from your console.
+
+For a more technical explanation, see [here](https://github.com/luigoalma/nimhax/) for information about the nimhax exploit and [here](https://github.com/zoogie/menuhax67) for information about menuhax67.
+
+{% endcapture %}
+<details>{{ technical_info | markdownify }}</details>
+{: .notice--info}
+
+### What You Need
+
+* The latest release of [nimhax](https://github.com/luigoalma/nimhax/releases/latest) (the nimhax `.zip` file)
+* The latest release of [Luma3DS](https://github.com/LumaTeam/Luma3DS/releases/latest) (the Luma3DS `.zip` file)
+
+### Instructions
+
+#### Section I - Injecting menuhax67
+
+1. Press (Y) + (D-Pad Down) to inject menuhax67
+1. The **target 3DS** will automatically power off
+
+You will **not** need to use your **source 3DS** to complete any further steps on this guide. Any further steps should only be completed on the **target 3DS**.
+{: .notice--info}
+
+#### Section II - Prep Work
+
+1. Power off your console
+1. Insert your SD card into your computer
+1. Copy the `nimhax` folder from the nimhax `.zip` to the `/3ds/` folder on your SD card
+1. Copy `boot.firm` and `boot.3dsx` from the Luma3DS `.zip` to the root of your SD card
+1. Reinsert your SD card into your console
+1. Power on your console
+
+![]({{ "/images/screenshots/nimhax-location.png" | absolute_url }})
+{: .notice--info}
+
+#### Section III - nimhax
+
+1. Open the Homebrew Launcher by tapping the HOME Menu Settings icon on the top-left corner of the screen
+1. Launch nimhax from the list of homebrew
+1. If the exploit was successful, a `movable.sed` file will appear on the root of your SD card
+
+### Next step: Frogtool
+
+Once you have your console's encryption key (`movable.sed`), you can use it in conjunction with Frogtool, which uses your `movable.sed` file to inject and take advantage of JPN Flipnote Studio. \
+
+Continue to [Installing boot9strap (Frogtool)](installing-boot9strap-(frogtool))
+{: .notice--primary}

_pages/en_US/site-navigation.txt

@@ -66,6 +66,7 @@ sitemap: false
 + [Installing boot9strap (SSLoth-Browser)](installing-boot9strap-(ssloth-browser))
 + [Installing boot9strap (USM)](installing-boot9strap-(usm))
 + [Key Information](key-information)
++ [menuhax67 + Frogtool (3DS ROP xPloit Injector)](menuhax67-frogtool-(3dsropxploitinjector))
 + [menuhax67 + nimhax (3DS ROP xPloit Injector)](menuhax67-nimhax-(3dsropxploitinjector))
 + [Move EmuNAND](move-emunand)
 + [ntrboot](ntrboot)