SocialClub Invite Blocker [BLOCKS SPECTATOR EXPLOIT]

[Speyedr]

Update 09/03/2022: Now that R* has patched the current spectator exploit, I've made an announcement about the future of SCBlocker here: https://github.com/Speyedr/socialclub-notification-blocker/discussions/12

As pretty much everyone is aware of by now, spammers have been sending out session invites for the past week or so and it seems R* either doesn't want to address the issue, or whatever they've done hasn't been very effective--In their infinite wisdom, R* decided that the setting "Hide Notifications" in SocialClub shouldn't hide session invites.

Now, it's gotten even worse to the point where invites are automatically accepted and you are pulled out of your current session without your consent.

I decided to set myself a challenge and try to write a program which could facilitate blocking these notifications and allow everybody to continue playing the game in peace. I've open-sourced the program here: ( https://github.com/Speyedr/socialclub-notification-blocker ) so that people can look at it and build it themselves if they want, but I'm sure most people will appreciate the binary version as well.

FAQ:

Is this a mod menu?
- No. This program does not modify the game in any way. Instead, it intercepts network packets and filters them in real time using heuristics I developed.


Is this against Rockstar ToS / illegal?
- Probably not, because no reverse-engineering of any Take-Two IP was necessary to make the program, and no reverse-engineered code is present in the program. That being said, I'm not a lawyer, and I don't know if Rockstar's Terms of Service are the same in every country.


Can I get banned for using this?
- Probably not, for the reasons listed above. This program doesn't modify or tamper with the game in any way, it doesn't violate Rockstar / Take-Two copyright, and it doesn't give you an advantage while playing.


How do I use it?

• Download, extract, and run SCBlocker.exe as Administrator. If the window looks like this[github.com], the network filter is running and notifications should be getting blocked. If you've enabled LOG BLOCKED ACTIVITY then check debug.log; when a notification or invite is blocked you should see the log file fill up with messages like this[github.com].
  
• Navigating the app is simple enough, just press the keys on your keyboard to interact with each menu option.
  
• The app will automatically save your settings and will attempt to auto-start if you previously exited the program while the network filter was ON.
  
• If the app displays an error when trying to turn the filter on that says something about "no filters being enabled", then press 2 and select a filter to enable.
  
• Filter #2 (DROP CLIENT POST) is recommended, but Filter #1 (DROP INC 80) is a fair alternative. Filter #3 (DROP LENGTHS) is still in development and not stable.
  
• Leave the app running in the background and enjoy the game again.

Can I still browse SocialClub in my browser while playing?
- Yes. This program should not block SocialClub in your browser.

Can I still use the SocialClub Overlay to send invites to my friends?
- Yes. The only thing that should be blocked is your notifications. You should still be able to send out invites and messages and view your friends' activities using the SocialClub Overlay.


The program isn't working correctly / crashes on startup.
- Create an issue here[github.com] and follow the appropriate steps and I'll look into it. I've put a lot of effort into making the program as robust as possible but sometimes these things happen.


Why would I download and run an .exe from a stranger?
- To be honest, you probably shouldn't. If you can, contact someone who can develop / read code and get them to check the source or just wait until someone else with more credibility then me can verify that this program is safe.

[IceLancer]

Hey this is way better then firewall block. It lets you join other people missions.

I still cant play properly tho, because other people still leave mission in middle , due to moders force loby invite

[AlexKidd62[FR]]

dont download anything here plz you put yourself at risk

[Fen]

Yes, I also experienced it. Thanks for sharing.

[[-MegaShadow-]]

It works great for now!

[Fen]

Originally posted by -MegaShadow-:

It works great for now!

Did you use the link above?

[[-MegaShadow-]]

Originally posted by Fen:

Originally posted by -MegaShadow-:

It works great for now!

Did you use the link above?

yup

[Capt Cringe]

I extracted the file, but "SCBlocker" is just an icon not an .exe. What's going on?

[IceLancer]

Originally posted by AlexKidd62FR:

dont download anything here plz you put yourself at risk

Thanks for the warning. But i can read a simple python script. And its very straight forward. Nothing malicious in code.
Everything important is stored in filter.py

    CLIENT_POST_ENDPOINT = "/gta5/11/gameservices/Presence.asmx/GetMessages"      # Update if R* change the endpoint
    CLIENT_POST_HOST = "prs-gta5-prod.ros.rockstargames.com"                      # Update if R* change the website
    CLIENT_POST_METHOD = "POST"                                                   # Update if R* change the method
    CLIENT_POST_PROTOCOL = "HTTP/1.1"                                             # Update if R* change the protocol

Moders invite are gone. I can actually play game now.

[Speyedr]

Originally posted by Capt Cringe:

I extracted the file, but "SCBlocker" is just an icon not an .exe. What's going on?

You downloaded the source code instead of the compiled version. Navigate to the "Releases" page and you can find the download under "Assets".

[Edu_TheHedgehog TTV]

Originally posted by IceLancer:

Originally posted by AlexKidd62FR:

dont download anything here plz you put yourself at risk

Thanks for the warning. But i can read a simple python script. And its very straight forward. Nothing malicious in code.
Everything important is stored in filter.py

    CLIENT_POST_ENDPOINT = "/gta5/11/gameservices/Presence.asmx/GetMessages"      # Update if R* change the endpoint
    CLIENT_POST_HOST = "prs-gta5-prod.ros.rockstargames.com"                      # Update if R* change the website
    CLIENT_POST_METHOD = "POST"                                                   # Update if R* change the method
    CLIENT_POST_PROTOCOL = "HTTP/1.1"                                             # Update if R* change the protocol

Moders invite are gone. I can actually play game now.

I do want to point ou, that I was reading the whole code for the past hour, and can say it does looks okay, and I will give a shot on a Virtual machine.

[Capt Cringe]

Originally posted by Speyedr:

Originally posted by Capt Cringe:

I extracted the file, but "SCBlocker" is just an icon not an .exe. What's going on?

You downloaded the source code instead of the compiled version. Navigate to the "Releases" page and you can find the download under "Assets".

ok thanks

[AlexKidd62[FR]]

Originally posted by The Joker:

Originally posted by IceLancer:

Thanks for the warning. But i can read a simple python script. And its very straight forward. Nothing malicious in code.
Everything important is stored in filter.py

    CLIENT_POST_ENDPOINT = "/gta5/11/gameservices/Presence.asmx/GetMessages"      # Update if R* change the endpoint
    CLIENT_POST_HOST = "prs-gta5-prod.ros.rockstargames.com"                      # Update if R* change the website
    CLIENT_POST_METHOD = "POST"                                                   # Update if R* change the method
    CLIENT_POST_PROTOCOL = "HTTP/1.1"                                             # Update if R* change the protocol

Moders invite are gone. I can actually play game now.

I do want to point ou, that I was reading the whole code for the past hour, and can say it does looks okay, and I will give a shot on a Virtual machine.

It would be "not at this time" i might try to have a look at it but just looking at the guy profile he got a vac ban so I pass on this. And wouldn't trust anyone but myself and friends.

[Speyedr]

Originally posted by AlexKidd62FR:

Originally posted by The Joker:

I do want to point ou, that I was reading the whole code for the past hour, and can say it does looks okay, and I will give a shot on a Virtual machine.

It would be "not at this time" i might try to have a look at it but just looking at the guy profile he got a vac ban so I pass on this. And wouldn't trust anyone but myself and friends.

I understand. The VAC ban is for CS:GO, while I was teaching myself how to code and reverse engineer I was in a terrible mental state and cheated as an outlet. I got what I deserved and have since been trying to develop programs to stop cheaters instead of assisting them.

[Miles (Tails) Prower]

Originally posted by AlexKidd62FR:

dont download anything here plz you put yourself at risk

Well, you jave right to not use it, but just to point out, this guy works in guardian, the program that allows you to get whitelisted session. I joined their discord and this name sutely in there.

[BlackBloodRum]

For Linux users here, a quick and dirty fix is to simply block outgoing udp ports 61455-61458 which will basically almost disable social online club features (such as invites).

This seems to stop it on my end.

If you're using firewalld:

$ firewall-cmd --direct --add-rule ipv4 filter OUTPUT 0 -p udp -m udp --dport=61455 -j DROP
$ firewall-cmd --direct --add-rule ipv4 filter OUTPUT 0 -p udp -m udp --dport=61456 -j DROP
$ firewall-cmd --direct --add-rule ipv4 filter OUTPUT 0 -p udp -m udp --dport=61457 -j DROP
$ firewall-cmd --direct --add-rule ipv4 filter OUTPUT 0 -p udp -m udp --dport=61458 -j DROP
$ firewall-cmd --direct --add-rule ipv4 filter OUTPUT 1 -j ACCEPT   

This should work with most setups. This config will reset after a reboot of firewalld daemon (or your system).

If it doesn't cause any problems, and does solve the problem for you, this will make the new firewalld rules persistant.

firewall-cmd --runtime-to-permanent

To be fair though, I have / had no intention of playing online, so the loss of social club features is no big deal to me.