search

ValveSoftware / Source-1-Games

Source 1 based games such as TF2 and Counter-Strike: Source
629 stars 73 forks source link

TF2- Spamming players with party invites crashes their game #5616

Open AmyMaton opened 2 months ago

AmyMaton commented 2 months ago

Spamming any player with party invites will crash their game.

To avoid use command "tf_party_ignore_invites 1" in console.

Samus4ran commented 1 month ago

tf_party_ignore_invites 1 does not fix this issue. Players are getting mass spam party invited by bots which, while getting rejected by the game client, causes lag and/or freezes the game for the targeted player.

zzDeathGodzz commented 1 month ago

This is such a massive exploit, especially for the biggest tf2 streamers out there that are being targetted, unplayable/unstreamable atm.

relaxtakenotes commented 1 month ago

For anyone that is interested:

https://github.com/DoctorMcKay/node-tf2/blob/d9cf0ff70b3162d530f7f6a82493a74f6ce800ea/protobufs/tf_gcmessages.proto#L153

The only problem would be creating accounts. Enjoy wreaking havoc until valve is forced to fix this braindead easy exploit

AmyMaton commented 4 weeks ago

[PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1719239547] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1721215315] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1721448193] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718308045] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718459239] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1719455772] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718665952] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1721182796] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718587543] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1720785380] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718571031] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718493947] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1721605648] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718120513] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1719567681] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1720776704] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1719523123] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718517374] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718226713] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1719047960] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1721631132] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718563485] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1721819784] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1720978822] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1721507263] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1719159563] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1717846271] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718705758] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1721219220] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1719239547] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1721215315] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1721448193] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718308045] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718459239] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1719455772] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718665952] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1721182796] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718587543] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1720785380] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718571031] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718493947] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1721605648] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718120513] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1719567681] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1720776704] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1719523123] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718517374] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718226713] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1719047960] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1721631132] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718563485] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1721819784] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1720978822] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1721507263] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1719159563] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1717846271] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718705758] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1721219220] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1719239547] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1721215315] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1721448193] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718308045] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718459239] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1719455772] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718665952] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718587543] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1720785380] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718571031] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718493947] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1721605648] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718120513] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1719567681] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1720776704] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1719523123] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718517374] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718226713] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1719047960] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1721631132] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718563485] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1721819784] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1721507263] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1719159563] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1717846271] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718705758] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1721219220] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1719239547] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1721215315] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1721448193] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718308045] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718459239] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1719455772] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718665952] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718587543] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1720785380] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718571031] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718493947] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1718120513] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1719567681] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1720776704] (current party 0) [PartyClient] Sending request to cancel outgoing invite/incoming join request for [U:1:1719523123] (current party 0)

Happened to me today. Here re linked accounts all bots.

relaxtakenotes commented 4 weeks ago

Replying to https://github.com/ValveSoftware/Source-1-Games/issues/5616#issuecomment-2171881397

Me and my friends were investigating it as well and we seen up to 700 unique steam accounts spamming these requests, so this list is not definitive

zzDeathGodzz commented 4 weeks ago

Crazy how theres no workaround for this, blocking them, console commands, private profile etc...

NULLYUKI commented 4 weeks ago

I'm not sure if this is the case, as this might need to be tested first. But it could be that these accounts are limited accounts and still have the possibility to spam players with party invites.

Because it would be too expensive too have so many accounts to not be limited anymore.

And according to the Steam support page, It does say anything about limited accounts not having the ability to send invites to players. https://help.steampowered.com/en/faqs/view/71D3-35C2-AD96-AA3A