Roll20-cheat-dice -

: Encouraging players to use official character sheet buttons rather than custom macros makes it easier to verify that standard modifiers are being used.

This report examines technical vulnerabilities and common exploits associated with "roll20-cheat-dice," specifically focusing on client-side manipulation of the Roll20 virtual tabletop platform. Overview of Exploits roll20-cheat-dice

: A showcase repository illustrating how to hijack WebSocket objects to modify client-side dice results. : Encouraging players to use official character sheet

: The primary technical method involves hijacking the window.WebSocket.prototype.send function. By using tools like Tampermonkey or Charles Proxy , users can intercept outgoing data packets. : The primary technical method involves hijacking the window

: A non-technical "cheat" involves temporarily inflating ability scores or modifiers on a character sheet before rolling, then quickly reverting them before the Game Master (GM) notices. Known Tools and Scripts

Several community-developed projects on platforms like GitHub demonstrate these vulnerabilities for educational or illustrative purposes: