Who
I’m tamago (@tamagor3ngs / tamagorengs).
A penetration tester who spent too long in a SOC before realizing breaking things is more fun than watching them break.
Three years in cybersecurity. OSCP, PNPT, CPTS. The certs are on the wall. The real credential is that I’ve sat in enough readout rooms to know most security postures are held together with duct tape and optimism.
I write code that breaks code. I build tools I actually use. I read philosophy books in malls at 2 AM and somehow connect them to red team operations.
tamago = the name. tamagorengs = the tag, because @tamago was taken. fried egg = the meaning.
What This Is
This blog is where I dump what I’m learning before I forget it.
- Writeups — CTF boxes, real engagement stories (sanitized), tools I reverse-engineered
- Notes — Cheatsheets, frameworks, things I got tired of googling
- Rants — Industry observations, mindset stuff, things that make me angry enough to write
I don’t do theory without practice. Every post is something I did, broke, or fixed. If I haven’t tested it, I don’t write it.
What I Believe
- Truth over comfort. A soft-pedaled finding is a lie that costs someone later.
- Tools should be simple. If it needs a 50-page manual, you built it wrong.
- The report matters more than the shell. Anyone can pop a box. Explaining why it matters is the craft.
- Burnout is a choice. Not a comfortable choice, but a choice. Teleology > etiology.
Where Else
| Platform | What I Post |
|---|---|
| GitHub | Tools, repos, cheatsheets |
| X / Twitter | Hot takes, thread dumps, random observations |
| aizzat.my | Landing page |
| tamagorengs.com | This blog |
RSS
Don’t rely on algorithms. Get posts when they drop.
RSS: https://tamagorengs.com/atom.xml
“The quieter you become, the more you can hear.”
I heard enough. Now I’m talking.
