Rating:

### TL;DR
1. Construct some plain/ciphertext pair.
2. Forge last block and tag.
3. Decrypt the flag.

Original writeup (https://sasdf.cf/ctf/writeup/2018/hxp/crypto/oops/).