Padding Oracle Lite

Challenge Question

This service holds an AES-CBC-encrypted copy of the flag, and right alongside it, a service that will decrypt anything you send it and happily tell you whether the padding came out valid. That's normally information nobody should ever get for free. Use it to recover the flag one byte at a time, without ever learning the key.