Skip to main content

Operating Systems

Advanced Training in Security and System Architecture​

Course Code: 420-911-MA
Session: Winter 2025
Instructor: Haythem Rehouma
Institution: Collège de Maisonneuve

Course Overview​

This course offers comprehensive and practical training on Windows and Linux operating systems, with a strong focus on computer security and vulnerability analysis.

Learning Objectives​

By the end of this course, you will be able to:

  • Master the architecture of Windows and Linux operating systems
  • Configure and secure system environments
  • Conduct comprehensive security audits
  • Identify and exploit vulnerabilities (within an ethical framework)
  • Automate administrative tasks with PowerShell and Bash
  • Analyze and correct risky configurations
  • Apply system hardening principles
  • Develop a professional security testing methodology

Teaching Approach​

70% Practical - 30% Theory

Each module combines:

  • Lectures on fundamental concepts
  • Hands-on practical labs
  • Real-world exploitation and defense scenarios
  • Synthesis projects

Course Plan​

MODULE 1 - Architecture & Foundations​

Duration: 2 sessions

Theoretical content:

  • Hardware architecture and peripherals
  • Buses, interfaces, and protocols
  • Essential system components

Practical labs:

  • Lab 1.1: Network environment discovery (20 min)
  • Lab 1.2: Traffic analysis with Wireshark (45 min)
  • Lab 1.3: System inventory and documentation (30 min)
  • Lab 1.4: WiFi credentials management and security (25 min)

Skills acquired:

  • Network commands (ipconfig, ping, tracert, netstat)
  • Network traffic capture and analysis
  • Professional system documentation
  • WiFi credentials extraction

MODULE 2 - Virtual Environment & BIOS​

Duration: 1 session

Theoretical content:

  • Virtualization and hypervisors
  • BIOS/UEFI and boot process
  • Windows device management

Practical labs:

  • Lab 2.1: Windows password bypass (30 min)
    • Utilman.exe method
    • Sticky Keys method
    • Safe mode
  • Lab 2.2: Disposable VM for destructive testing (25 min)
    • Snapshots and cloning
    • Secure destructive tests
  • Lab 2.3: Alternative boots and Evil Maid attacks (35 min)
    • Boot from ISO
    • Physical access
    • Firmware protection

Skills acquired:

  • Access recovery techniques
  • VirtualBox snapshot management
  • Understanding physical attacks
  • Secure Boot and BIOS configuration

MODULE 3 - Secure Windows Configuration​

Duration: 2 sessions

Theoretical content:

  • Windows installation and configuration
  • VirtualBox Guest Additions
  • Backup and restore

Practical labs:

  • Lab 3.1: Massive credentials extraction (35 min)
    • Automated WiFi passwords
    • Browser credentials (LaZagne)
    • Windows NTLM hash
  • Lab 3.2: Reverse shell and remote control (30 min)
    • Netcat and PowerShell
    • C&C communication
    • Persistence
  • Lab 3.3: PowerShell keylogger (35 min)
    • Keystroke capture
    • Stealth and hiding
    • Detection and defense

Skills acquired:

  • Mass credentials extraction
  • Establishing reverse shells
  • Creating and detecting keyloggers
  • Post-exploitation techniques

MODULE 4 - File Systems & Permissions​

Duration: 2 sessions

Theoretical content:

  • Windows directory structure
  • FAT32, ExFAT, NTFS, ReFS
  • Permissions and ACL

Practical labs (Coming soon):

  • Lab 4.1: Exploiting misconfigured permissions
  • Lab 4.2: Alternate Data Streams (ADS)
  • Lab 4.3: Shadow copies and file recovery

Targeted skills:

  • System permissions audit
  • Privilege escalation via files
  • Advanced hiding techniques

MODULE 5 - Network & Security​

Duration: 3 sessions

Theoretical content:

  • OSI and TCP/IP models
  • IP addressing and DHCP
  • DNS and name resolution
  • UAC and Windows Defender

Practical labs (Coming soon):

  • Lab 5.1: Network scan with Nmap
  • Lab 5.2: DNS enumeration
  • Lab 5.3: ARP spoofing and Man-in-the-Middle

Targeted skills:

  • Complete network mapping
  • Traffic interception
  • Network vulnerability analysis

MODULE 6 - Services & Performance​

Duration: 2 sessions

Theoretical content:

  • Windows services management
  • Firewall configuration
  • System optimization

Practical labs (Coming soon):

  • Lab 6.1: Exploiting Windows services
  • Lab 6.2: SQL Injection on web application
  • Lab 6.3: XSS and session hijacking

Targeted skills:

  • Exploiting vulnerable services
  • Web application security
  • OWASP Top 10

MODULE 7 - Windows Command Line​

Duration: 1 session

Theoretical content:

  • CMD and essential commands
  • Batch scripts
  • Task automation

Practical labs (Coming soon):

  • Lab 7.1: System enumeration scripts
  • Lab 7.2: Persistent batch backdoor
  • Lab 7.3: Lateral movement

Targeted skills:

  • Command line mastery
  • Automation with batch
  • Post-exploitation scripts

MODULE 8 - PowerShell & Automation​

Duration: 4 sessions

Theoretical content:

  • Advanced PowerShell
  • Windows Registry
  • Environment variables

Practical labs (Coming soon):

  • Lab 8.1: Mimikatz - Live credentials extraction
  • Lab 8.2: Obfuscation and antivirus bypass
  • Lab 8.3: Empire C2 Framework

Targeted skills:

  • Offensive PowerShell
  • Memory credentials extraction
  • Defense bypass

MODULE 9 - Linux & Processes​

Duration: 1 session

Theoretical content:

  • Introduction to Linux
  • WSL (Windows Subsystem for Linux)
  • Process management

Practical labs (Coming soon):

  • Lab 9.1: Linux privilege escalation
  • Lab 9.2: Linux reverse shell
  • Lab 9.3: Basic rootkit

Targeted skills:

  • Linux exploitation
  • User → Root
  • Linux hiding techniques

MODULE 10 - Client-Server & IPC​

Duration: 1 session

Theoretical content:

  • Client-server architecture
  • Inter-process communication
  • Sockets and networking

Practical labs (Coming soon):

  • Lab 10.1: Complete vulnerable web application
  • Lab 10.2: REST API - JWT forgery
  • Lab 10.3: Command injection and RCE

Targeted skills:

  • Web application exploitation
  • API security
  • Remote Code Execution

MODULE 11 - Shared Memory & Review​

Duration: 2 sessions

Theoretical content:

  • Memory management
  • Synchronization and IPC
  • General review

Practical labs (Coming soon):

  • Lab 11.1: Complete Mini-CTF (3h)
    • Multi-VM infrastructure
    • 6-7 flags to capture
    • Use of all techniques
  • Lab 11.2: Forensics and incident analysis

Targeted skills:

  • Integration of all techniques
  • Pentest methodology
  • Professional reporting

MODULE 12 - Final Evaluation​

Duration: 1 session

Practical evaluation:

  • Penetration test on complete infrastructure
  • Professional pentest report
  • Exploits demonstration
  • Remediation recommendations

Practical Labs Recap​

Completed Labs (Modules 1-3)​

ModuleLabTimeDifficultyType
1Network discovery20 min⭐⭐Reconnaissance
1Wireshark45 min⭐⭐Analysis
1System inventory30 min⭐⭐Documentation
1WiFi credentials25 min⭐⭐Extraction
2Password bypass30 min⭐⭐Exploitation
2Disposable VM25 min⭐⭐Infrastructure
2Boot attacks35 min⭐⭐⭐Physical access
3Credentials extraction35 min⭐⭐⭐Post-exploitation
3Reverse shell30 min⭐⭐⭐Remote control
3Keylogger35 min⭐⭐⭐Surveillance

Total completed labs: 10 labs - 310 minutes (~5 hours)

Upcoming Labs (Modules 4-12)​

ModulePlanned LabsCovered Techniques
43 labsPermissions, ADS, Shadow copies
53 labsNmap, DNS, ARP spoofing
63 labsServices, SQL injection, XSS
73 labsCMD, Batch, Lateral movement
83 labsMimikatz, Bypass AV, Empire
93 labsLinux privesc, Reverse shell, Rootkit
103 labsWeb apps, API, Command injection
112 labsCTF, Forensics
121 projectComplete pentest

Total planned: 30+ practical labs

Course Progression​

✅ MODULE 1 - Architecture & Foundations (COMPLETED)
✅ MODULE 2 - Virtual Environment & BIOS (COMPLETED)
✅ MODULE 3 - Secure Windows Configuration (COMPLETED)
⏳ MODULE 4 - File Systems & Permissions
⏳ MODULE 5 - Network & Security
⏳ MODULE 6 - Services & Performance
⏳ MODULE 7 - Windows Command Line
⏳ MODULE 8 - PowerShell & Automation
⏳ MODULE 9 - Linux & Processes
⏳ MODULE 10 - Client-Server & IPC
⏳ MODULE 11 - Shared Memory & Review
⏳ MODULE 12 - Final Evaluation

Current progression: 3/12 modules (25%)

Tools and Technologies​

Analysis Tools​

  • Wireshark - Network traffic analysis
  • Nmap - Network and port scanner
  • Netstat - Active connections
  • Process Explorer - Process analysis

Exploitation Tools​

  • Metasploit Framework - Service exploitation
  • LaZagne - Credentials extraction
  • Mimikatz - Memory credentials dump
  • Netcat - Reverse shells
  • PowerShell Empire - C2 Framework

Environments​

  • VirtualBox - Virtualization
  • Windows 10/11 - Main target system
  • Kali Linux - Pentest distribution
  • WSL - Windows Subsystem for Linux

Scripting Languages​

  • PowerShell - Windows automation
  • Batch - CMD scripts
  • Bash - Linux scripts
  • Python - Custom scripts

Learning Methodology​

Phase 1: Reconnaissance (Modules 1-2)​

Focus: Information gathering and initial access

  • Scan and map a system
  • Identify vulnerabilities
  • Gain initial access

Phase 2: Exploitation (Modules 3-6)​

Focus: Exploiting vulnerabilities

  • Authentication bypass
  • Service exploitation
  • Web application exploitation
  • Post-exploitation

Phase 3: Automation (Modules 7-8)​

Focus: Scripting and automation

  • Automation with CMD and PowerShell
  • Defense bypass
  • Persistence and backdoors

Phase 4: Multi-Platform (Modules 9-10)​

Focus: Linux and applications

  • Linux exploitation
  • Application security
  • Client-server architecture

Phase 5: Synthesis (Modules 11-12)​

Focus: Complete integration

  • Multi-machine CTF
  • Forensics and detection
  • Final pentest project

Developed Skills​

Technical Skills​

System Administration:

  • Windows/Linux configuration and hardening
  • User and permissions management
  • System services and daemons
  • Network and firewall

Offensive Security:

  • Reconnaissance and enumeration
  • Vulnerability exploitation
  • Post-exploitation and persistence
  • Lateral movement
  • Data exfiltration

Defensive Security:

  • Intrusion detection
  • Log analysis
  • Incident response
  • Hardening and compliance

Automation:

  • PowerShell and Bash scripts
  • Audit task automation
  • Report generation
  • Configuration deployment

Professional Skills​

  • Penetration testing methodology
  • Professional technical documentation
  • Audit report writing
  • Risk communication
  • Ethics and professional responsibility

Evaluations​

Practical Work​

  • TP1: Windows configuration and audit (10%)
  • TP2: Network and services analysis (10%)
  • TP3: PowerShell and automation (15%)

Labs​

  • Weekly labs (30%)
  • Participation and engagement (5%)

Final Project​

  • Mini-CTF and complete pentest (20%)
  • Professional report (10%)

Total: 100%

Technical Prerequisites​

  • Computer with at least 16 GB RAM (8 GB minimum)
  • Processor with virtualization support (Intel VT-x / AMD-V)
  • 100 GB of free disk space
  • Stable Internet connection

Required Software​

  • VirtualBox (free)
  • Windows 10/11 ISO (provided)
  • Text editor (VS Code recommended)
  • Git client (optional)

Prior Knowledge​

  • Basic Windows usage
  • File system navigation
  • Basic network concepts (IP, DNS)
  • No programming experience required

Course Resources​

Documentation​

  • Course website (this site)
  • Detailed lab guides
  • Quick reference commands
  • Security checklists

Practical Applications​

  • Vulnerable web applications (provided)
  • Preconfigured VMs (coming soon)
  • Scripts and tools (GitHub repository)

External Resources​

  • Microsoft documentation
  • OWASP Top 10
  • CIS Benchmarks
  • MITRE ATT&CK Framework

Code of Ethics and Responsibility​

Ethical Commitment​

By taking this course, you commit to:

Using the acquired knowledge:

  • Only for legitimate educational and professional purposes
  • On your own systems or with explicit written authorization
  • In compliance with Canadian and international laws
  • Respecting others' privacy and property

NEVER:

  • Apply these techniques without authorization
  • Access systems you do not own
  • Share tools or techniques with unauthorized individuals
  • Use this knowledge to harm, spy, or steal

Consequences​

Violation of the code of ethics:

  • Automatic course failure
  • Academic disciplinary measures
  • Possible legal prosecution
  • Potential criminal record

Responsible use:

  • Tests only on isolated lab environments
  • Dedicated VMs without Internet access for offensive tests
  • Complete documentation of all actions
  • Respect legal and ethical framework at all times

Schedule and Timetable​

Format: Hybrid (in-person + self-paced labs)

Class sessions:

  • Presentation of theoretical concepts
  • Practical demonstrations
  • Support and questions
  • Evaluations

Self-paced work:

  • Completion of labs
  • Practical work
  • Reading and research
  • Project preparation

Estimated workload:

  • 3 hours in class per week
  • 6-8 hours of self-paced work per week
  • Total: 9-11 hours per week

Support and Communication​

How to Reach Me​

Enrolled students:

  • Omnivox MIO: Preferred method (response within 24h)
  • In class: Before, during, or after sessions
  • Consultation hours: To be determined

External individuals:

Help Resources​

Technical:

  • Lab documentation (detailed guides)
  • Troubleshooting sections in each lab
  • FAQ by module
  • Discussion forum (Omnivox)

Academic:

  • Help center (College)
  • Peer tutoring
  • Study groups

Certification and Career Path​

Aligned Certifications​

This course prepares for certifications:

  • CompTIA Security+ - Security foundations
  • CompTIA Linux+ - Linux administration
  • CEH (Certified Ethical Hacker) - Ethical hacking
  • OSCP (Offensive Security Certified Professional) - Pentest
  • PNPT (Practical Network Penetration Tester)

Career Opportunities​

Targeted professions:

  • Security Analyst
  • Pentester / Ethical Hacker
  • System Administrator
  • SOC Analyst (Security Operations Center)
  • Security Consultant
  • DevSecOps Engineer
  • Incident Response Analyst

Sectors:

  • Technology companies
  • Financial institutions
  • Government and defense
  • Cybersecurity firms
  • Consulting

Course Policy​

Attendance and Participation​

  • Mandatory attendance at sessions
  • Active participation encouraged
  • Labs must be completed to pass

Academic Integrity​

  • Individual work unless otherwise stated
  • Collaboration encouraged for learning, not for copying
  • Plagiarism = automatic failure
  • Strict code of ethics for security techniques

Material and Equipment​

  • Bring your laptop if possible
  • Lab equipment available on site
  • Regularly back up your work
  • Backup VMs recommended

Important Notes​

Omnivox​

This website complements Omnivox but does not replace it. Continue to check Omnivox for:

  • Official announcements
  • Assignment submissions
  • Grades and evaluations
  • Important communications

Updates​

This site is updated regularly:

  • New content added weekly
  • Labs published progressively
  • Continuous corrections and improvements
  • Additional resources added

Content Access​

Protected content:

  • Access reserved for enrolled students
  • Password required
  • Session valid for 24 hours
  • Do not share credentials

Contact and Support​

Instructor: Haythem Rehouma
Institution: Collège de Maisonneuve
Course: 420-911-MA - Operating Systems
Session: Winter 2025

Platforms:

Start Now!​

Explore the modules in the sidebar and begin your learning journey in operating system security!

Available modules:

  • MODULE 1: Architecture & Foundations (4 labs)
  • MODULE 2: Virtual Environment & BIOS (3 labs)
  • MODULE 3: Secure Windows Configuration (3 labs)
  • MODULES 4-12: Coming soon

Enjoy the course and happy learning! 🎓

Last updated: November 8, 2024