Home

SecuBox-DEB

Security Appliance for Debian | Français | 中文 | v1.8.0

SecuBox is a complete security appliance solution ported from OpenWrt to Debian bookworm, designed for GlobalScale ARM64 boards (MOCHAbin, ESPRESSObin) and x86_64 systems. Now featuring 124 packages with 2000+ API endpoints.

v1.8.0 Highlights:

• Eye Remote - Multi-mode USB gadget for RPi Zero W + HyperPixel Round
• 5 USB modes: Normal, Flash, Debug, TTY (keyboard), Auth (FIDO2)
• Smart auto-mode detection at boot
• Ready-to-flash SD card image builder
• x64 live boot support for Eye Remote dashboard

v1.6.x Features:

• Kiosk Mode - Fullscreen browser dashboard (default boot)
• Plymouth Splash - Animated boot screen
• Bridge Mode - Inline transparent bridge boot option

---

Quick Start

VirtualBox (2 Minutes)

Test SecuBox instantly in VirtualBox - no USB drive needed:

# Download image
wget https://github.com/CyberMind-FR/secubox-deb/releases/download/v1.8.0/secubox-live-amd64-bookworm.img.gz
gunzip secubox-live-amd64-bookworm.img.gz

# Convert to VDI format
VBoxManage convertfromraw secubox-live-amd64-bookworm.img secubox-live.vdi --format VDI

# Create and start VM (use our script)
curl -sLO https://raw.githubusercontent.com/CyberMind-FR/secubox-deb/master/scripts/create-secubox-vm.sh
chmod +x create-secubox-vm.sh
./create-secubox-vm.sh secubox-live.vdi

Or one-liner with auto-download:

curl -sL https://raw.githubusercontent.com/CyberMind-FR/secubox-deb/master/scripts/create-secubox-vm.sh | bash -s -- --download

Access (wait 30-60s for boot):

Service	Access
SSH	ssh -p 2222 root@localhost
Web UI	https://localhost:9443
Password	secubox

See Live-USB-VirtualBox for full documentation and troubleshooting.

---

Live USB (Hardware)

Boot directly from USB on physical hardware:

# Download
wget https://github.com/CyberMind-FR/secubox-deb/releases/download/v1.8.0/secubox-live-amd64-bookworm.img.gz

# Flash to USB drive (replace /dev/sdX)
zcat secubox-live-amd64-bookworm.img.gz | sudo dd of=/dev/sdX bs=4M status=progress
sync

See Live-USB for complete guide.

---

APT Installation (Existing Debian)

# Add repository and install
curl -fsSL https://apt.secubox.in/install.sh | sudo bash
sudo apt install secubox-full   # or secubox-lite

See Installation for detailed instructions.

---

Eye Remote (v1.8.0)

The SecuBox Eye Remote transforms a Raspberry Pi Zero W with HyperPixel 2.1 Round display into a powerful debugging and security control device.

        ┌──────────────────────┐
        │    HyperPixel Round  │
        │     [GPIO Header]    │
        └──────────┬───────────┘
        ┌──────────┴───────────┐
        │   Raspberry Pi Zero  │
        │  [PWR]  [DATA]       │
        │    ○      ●          │
        │          ↑           │
        │   USB OTG to SecuBox │
        └──────────────────────┘

USB Gadget Modes

Mode	Functions	Use Case
Normal	Network + Serial	Monitoring dashboard
Flash	Bootable USB	Recovery/eMMC flashing
Debug	Network + Storage	Log export, diagnostics
TTY	HID Keyboard	U-Boot automation
Auth	FIDO2/U2F	Security key + QR

Quick Start

cd secubox-deb/remote-ui/round

# Build ready-to-flash SD image
./build-eye-remote-image.sh \
    -i raspios-lite.img.xz \
    -s "YourWiFi" \
    -p "password"

# Flash to SD card
sudo dd if=/tmp/secubox-eye-remote-1.8.0.img of=/dev/sdX bs=4M status=progress

See Eye-Remote for complete documentation.

---

Features

Category	Modules	Count
Security	CrowdSec, WAF, NAC, Auth, Hardening, AI-Insights, IPBlock	15
Networking	WireGuard, HAProxy, DPI, QoS, Network Modes, Interceptor	12
SOC	Fleet Monitoring, Alert Correlation, Threat Maps, Console TUI	6
Monitoring	Netdata, Metrics, Threats, OpenClaw OSINT	8
Applications	Ollama, Jellyfin, HomeAssistant, Matrix, Jitsi, PeerTube	21
System Tools	Glances, MQTT, TURN, Vault, Cloner, VM	22
Email & DNS	Postfix/Dovecot, Webmail, DNS Provider	9
Remote UI	Eye Remote (RPi Zero W + HyperPixel Round)	1

Total: 124+ packages

---

Supported Hardware

Board	SoC	Profile	Use Case
MOCHAbin	Armada 7040	Full	Enterprise Gateway
ESPRESSObin v7	Armada 3720	Lite	Home/SMB Router
ESPRESSObin Ultra	Armada 3720	Lite+	Home with Wi-Fi
Raspberry Pi 4/5	BCM2711/2712	Lite/Full	Maker Projects
RPi Zero W	BCM2835	Eye Remote	USB Gadget Controller
VM x86_64	Any	Full	Testing/Development

---

Documentation

• Live-USB-VirtualBox - VirtualBox quick start
• Live-USB - Bootable USB guide
• Eye-Remote - Eye Remote guide (v1.8.0)
• Installation - Full installation
• Modules - All modules
• API-Reference - REST API (2000+ endpoints)
• Troubleshooting - Common issues

---

Default Credentials

Service	Username	Password
Web UI	admin	secubox
SSH	root	secubox
Eye Remote	pi	raspberry

---

Links

• GitHub Repository
• Releases
• Issues
• Issue #30 - Eye Remote
• CyberMind