mirror of https://github.com/CyberMind-FR/secubox-deb.git synced 2026-07-29 22:07:24 +00:00

History

CyberMind-FR add0fda3f6 feat(toolbox): API /rlevel admin + peer self-service (tunnel-auth, ctl delegation) Adds GET/POST /rlevel/peers, /rlevel/peer/{pubkey}, /rlevel/me to the toolbox FastAPI router. Admin routes list every wg-toolbox peer's rlevel status (chosen/forced/floor/effective + best-effort live handshake) and set floor/forced. Peer self-service resolves identity from the wg tunnel source IP (_client_ip -> wg-peers.json), 403s on an unknown IP, and 409s if the requested chosen mode would drop below the peer's floor or lift an admin forced mode. Every write delegates to `sudo -n sbxmitm-policyctl` (set-floor/force/set-chosen) -- no in-process root, mirrors the proxypac API's _ctl pattern. Co-Authored-By: Gerald KERMA <devel@cybermind.fr>		2026-07-24 15:50:49 +02:00
..
conf	fix(toolbox): Tor-VPN DNS-leak ordering + fail-closed kill-switch + mac-branch guard	2026-07-09 08:07:43 +02:00
data
debian	fix(toolbox): NEVER-SPLICE guard — ad networks must never become passthrough	2026-07-23 13:04:46 +02:00
lxc
menu.d
mitmproxy_addons	feat(toolbox): activate Sentinel + surface compromise detections (WebUI tab · kbin report · PDF) — ref #823 (#825 )	2026-07-06 17:39:42 +02:00
nftables.d	fix(toolbox): off-bypass via named set @rlevel_off dans la chaîne fanout (return same-chain — table séparée ne bloquait pas le DNAT)	2026-07-24 15:42:30 +02:00
nginx
sbin	fix(toolbox): off-bypass via named set @rlevel_off dans la chaîne fanout (return same-chain — table séparée ne bloquait pas le DNAT)	2026-07-24 15:42:30 +02:00
scripts
secubox_toolbox	feat(toolbox): API /rlevel admin + peer self-service (tunnel-auth, ctl delegation)	2026-07-24 15:50:49 +02:00
systemd	feat(toolbox): package mesh-exclusion publish+sync timers (ref #806 )	2026-07-04 17:47:43 +02:00
tests	feat(toolbox): API /rlevel admin + peer self-service (tunnel-auth, ctl delegation)	2026-07-24 15:50:49 +02:00
tmpfiles.d	fix(toolbox): tmpfiles pins media-catch /run file to worker uid (#801 )	2026-07-04 14:57:54 +02:00
unbound
www/toolbox	fix(toolbox): #ads — show the ad-candidate backlog instead of a false "rien détecté"	2026-07-23 11:17:25 +02:00
CLAUDE.md
pyproject.toml
README.md	docs(wiki): refonte 126 modules — snapshots WebUI déterministes + READMEs 4 langues (ref #742 )	2026-06-26 10:14:14 +02:00

README.md

🧰 ToolBoX (Cabine)

Captive AP + consented MITM privacy analyzer

Category: Security

Screenshot

Features

Captive portal
R0-R4 levels
Tracker exposure
Tor egress

Installation

# Add SecuBox repository
curl -fsSL https://apt.secubox.in/install.sh | sudo bash

# Install package
sudo apt install secubox-toolbox

Configuration

Configuration file: /etc/secubox/toolbox.toml

API Endpoints

GET /api/v1/toolbox/status - Module status
GET /api/v1/toolbox/health - Health check