TL;DR: Exploit the "null byte" separator in PKCSv1.5 padding.

Original writeup (https://mystiz.hk/posts/2022/2022-07-20-google-ctf-maybe-someday/).