UNOFFICIAL firmware. RLN8-410 board N2MB02 ONLY. Brick risk on any other board.

Stock base: Reolink v3.5.1.368_25010326 (Novatek NT98312)
This pak dest_ver: 368_25111499
SHA256: fa66d5d7669ce2f17ef123b086da64ef13a610131602676019277392040f3d8f
Size: 39 MB

What it does
------------
Only the filesystem is patched. On boot, S90StartSuvr copies /mnt/para to a
FAT32 USB as para-dump/ (plus para-dump.tar and DONE.txt), then renames
upgrade/ to upgrade.done so the same pak does not reflash in a loop.

USB flash
---------
1. Confirm the NVR is RLN8-410 / N2MB02 / v3.5.1.368. Anything else: stop.
2. MBR, FAT32, single partition. Folder: upgrade/<this.pak>
3. Leave the stick plugged. Power-cycle the NVR.
4. Wait for the upgrade, then the reboot into 368_25111499.
5. After that boot, the stick must still be plugged (or plug it and reboot once).
6. You want para-dump/DONE.txt on the stick.

device.xml
----------
Each camera is a node dev_0, dev_1, … Attribute pwd is a 24-character Base64
string. If pwd_ver is absent, that string is the camera admin password in
clear. Login to each IPC as admin with that password, then ModifyUser with
oldPassword + newPassword. Enable RTSP / ONVIF / HTTP / HTTPS.

Do not use this as a daily firmware unless you want it. After the dump you
can flash official stock from Reolink's download centre.

Not affiliated with Reolink. Own-hardware recovery. Read the article:

https://robertoinnaimi.com/blog/reolink-infierno-camaras-cifradas-nvr-sin-hdmi/
https://robertoinnaimi.com/en/blog/reolink-hell-encrypted-cameras-headless-nvr/
https://robertoinnaimi.com/it/blog/reolink-inferno-telecamere-cifrate-nvr-senza-hdmi/