Home
CyberMind · Gondwana · Notre-Dame-du-Cruet · Savoie | FR | 中文
Complete security appliance solution ported from OpenWrt to Debian bookworm. Designed for GlobalScale ARM64 boards (MOCHAbin, ESPRESSObin) and x86_64 systems.
| Component | Status | Description |
|---|---|---|
 |
 |
Debian packages (131 debs) |
 |
 |
Bootable images (x64, ARM64) |
 |
 |
GUI installer ISO |
 |
 |
USB gadget boot device |
 |
 |
Dual-arch live image |
| Metric | Value | Status |
|---|---|---|
 |
131 Debian packages | Production |
 |
123/131 completed | Active |
 |
REST + WebSocket | Stable |
|  | x86_64 + ARM64 |
 |
v2.3.0 | Stable |
| Category | Count | Migrated | Status |
|---|---|---|---|
| 🟢 Core | 15 | 15 |  |
| 🟡 Security | 25 | 24 |  |
| 🔵 Network | 20 | 20 | |
| 🟣 Apps | 35 | 33 |  |
| 🟠 Monitoring | 18 | 18 | |
| 🔴 SOC | 18 | 13 |  |
NEW v2.3.0 — Mitmproxy WAF + VirtualBox Support
Complete mitmproxy WAF module migration with LXC isolation, 90+ threat detection patterns, and HAProxy integration. VirtualBox VM images now available for instant testing.
What's New:
- Mitmproxy WAF with CrowdSec auto-banning
- VirtualBox VDI images for easy VM setup
- Eye Remote multi-arch OS flasher
- Improved network detection for VMs and baremetal
See Live-USB-VirtualBox for VM setup | Download v2.3.0
Test SecuBox instantly in VirtualBox — no USB drive needed:
# Download latest image
wget https://github.com/CyberMind-FR/secubox-deb/releases/latest/download/secubox-live-amd64-bookworm.img.gz
gunzip secubox-live-amd64-bookworm.img.gz
# Convert to VDI format
VBoxManage convertfromraw secubox-live-amd64-bookworm.img secubox-live.vdi --format VDI
# Create and start VM
curl -sLO https://raw.githubusercontent.com/CyberMind-FR/secubox-deb/master/image/create-vbox-vm.sh
chmod +x create-vbox-vm.sh
./create-vbox-vm.sh secubox-live.vdiOne-liner with auto-download:
curl -sL https://raw.githubusercontent.com/CyberMind-FR/secubox-deb/master/image/create-vbox-vm.sh | bash -s -- --downloadSee Live-USB-VirtualBox for full documentation.
Boot directly from USB on physical hardware:
wget https://github.com/CyberMind-FR/secubox-deb/releases/latest/download/secubox-live-amd64-bookworm.img.gz
zcat secubox-live-amd64-bookworm.img.gz | sudo dd of=/dev/sdX bs=4M status=progressSee Live-USB for complete guide.
curl -fsSL https://apt.secubox.in/install.sh | sudo bash
sudo apt install secubox-full # or secubox-liteSee Installation for detailed instructions.
| Service | Username | Password |
|---|---|---|
| Web UI | admin | secubox |
| SSH | root | secubox |
| Access | https://localhost:9443 | SSH port 2222 |
| Board | SoC | Profile | Use Case |
|---|---|---|---|
| MOCHAbin | Armada 7040 | Full | Enterprise Gateway |
| ESPRESSObin v7 | Armada 3720 | Lite | Home/SMB Router |
| ESPRESSObin Ultra | Armada 3720 | Lite+ | Home with Wi-Fi |
| Raspberry Pi 400 | BCM2711 | Full | Maker Projects |
| VM x86_64 | Any | Full | Testing/Development |
| QEMU ARM64 | Emulated | Full | ARM testing on x86 |
| Stack | Description | Modules |
|---|---|---|
| 🟠 AUTH | Authentication, ZeroTrust, MFA | auth, portal, users, nac |
| 🟡 WALL | Firewall, CrowdSec, WAF, IDS/IPS | crowdsec, waf, threats, ipblock |
| 🔴 BOOT | Deployment, provisioning | cloner, vault, vm, rezapp |
| 🟣 MIND | AI, behavioral analysis, DPI | dpi, netifyd, ai-insights, soc |
| 🟢 ROOT | System, CLI, hardening | core, hub, system, console |
| 🔵 MESH | Network, WireGuard, QoS | wireguard, haproxy, netmodes, turn |
Total: 131 packages
See MODULES-EN for complete module documentation.
- Live-USB-VirtualBox ⭐
- Live-USB — Bootable USB guide
- ARM-Installation — ARM boards & U-Boot ⚡
- QEMU-ARM64 — ARM emulation on x86 🖥️
- Configuration — System configuration
- Troubleshooting — Common issues
- MODULES-EN — All 125 modules
- API-Reference — REST API (2000+ endpoints)
- CrowdSec — Community-driven IDS/IPS
- WAF — 300+ ModSecurity rules
- nftables — Default DROP policy
- AI-Insights — ML threat detection
- IPBlock — Automated blocklist management
- MAC-Guard — MAC address control
© 2026 CyberMind · Notre-Dame-du-Cruet, Savoie