Roll20-cheat-dice Review
Several community-developed projects on platforms like GitHub demonstrate these vulnerabilities for educational or illustrative purposes:
: GMs should hover their mouse over any suspicious roll in the chat window. This reveals the formula breakdown , showing the actual raw die roll and every modifier applied. roll20-cheat-dice
: A showcase repository illustrating how to hijack WebSocket objects to modify client-side dice results. : Using the platform's 3D Dice feature is
: Using the platform's 3D Dice feature is often recommended, as these visual representations are harder to manipulate through simple packet editing. By using tools like Tampermonkey or Charles Proxy
: A non-technical "cheat" involves temporarily inflating ability scores or modifiers on a character sheet before rolling, then quickly reverting them before the Game Master (GM) notices. Known Tools and Scripts
: The primary technical method involves hijacking the window.WebSocket.prototype.send function. By using tools like Tampermonkey or Charles Proxy , users can intercept outgoing data packets.