Browser extensions starting with G

Grok to PDF embeds OAuth client secrets used when connecting Yandex Disk and Notion accounts.

Group Scraper for FB collects Facebook group member profile records through Facebook GraphQL and exports them to CSV.

Groupboss stores backend auth tokens and optional saved login passwords with a hardcoded encryption passphrase.

Groups Watcher sends Facebook GraphQL requests with a spoofed Origin header and posts support/error details to Discord webhooks.

Tube Transcripts reads YouTube cookies and sends them to its Cloud Functions when used in YouTube Studio.

Growwer extracts outbound link domains from supported search, SEO, and AI pages and sends them to tool.growwer.com.

Creates Gruveo call rooms and copies shareable links for video, voice, or screen sharing calls.

GuardExt checks installed extension IDs against Google's Chrome update service when the user starts a scan.

GuinRank-Write stores its extension URL in each site's localStorage when its content script runs.

Guinea Pig Wallpaper sends top-site and saved shortcut URLs to Google's favicon service on its new-tab page.

This extension adds fallback font support for viewing Gujarati script on websites.

Downloads multiple files from a Gumroad purchase page in sequence.

This extension provides access to the Gun Mayhem 2 platform shooter game in the browser.

This extension provides access to the Gun Mayhem platform shooter game in the browser.

Play a mouse-controlled target shooting game with multiple weapons and progressing levels.

Adds a Gundam-themed live wallpaper with clock, shortcuts, search, and custom cursor elements.

Gyazo Teams sends user-captured screenshots with the page URL and title to upload.gyazo.com.

Gõ công thức toán LaTeX trong comment Facebook opens a CodeCogs LaTeX editor over unencrypted HTTP.

gRPC Devtools captures gRPC-Web and Connect-ES request and response payloads from all pages for its DevTools panel.

Duplicates Google Calendar events individually or in bulk for easier schedule copying.

griffel-devtools marks every page frame in sessionStorage when it runs on all URLs.

GetVid Video Downloader sends per-domain video download usage counts to getvid.site every 5 minutes.

GFC Invoice intercepts clicks on 17 shopping sites and reroutes the purchase through its own affiliate link before it loads.

This extension hides unwanted websites from Google search results using a user-managed block list.

Gemini next to Google results sends search-page prompts to Gemini through your logged-in Google session.

GoStream - Facebook LIVE copies every Facebook cookie, including the session token, into a clipboard-ready block with one click.

GetFreeCoupons reports the domain of every website you visit to its own servers to check for matching coupons.

Automates Grok image and video generation workflows with saved prompts and batch downloads.

GrabzIt Web Scraping Assistant sends the user's live GrabzIt account key to a third-party analytics service on popup errors.

Goku Watching Sunset Dragon Ball tags every Google and Bing search made from its new-tab page with a hardcoded affiliate ID.

Sapling's writing assistant loads and runs unsigned code from its own server on Amazon Connect contact-center pages.

Group Monkey reads Facebook group join-request details and sends them to api.groupmonkey.io.

Adds a custom sticker manager for quickly sending saved stickers on live-streaming sites.

Gimme Video reads your full site cookie jar on YouTube, Instagram, Facebook, Reddit, X/Twitter or TikTok and sends it to its own server.

GroupKii rewrites the Origin and Referer headers to facebook.com on any tab's request to a facebook.com URL, not just its own.

Gamma CRM Integration lets pages on listed CRM sites read and overwrite its stored settings and place calls.

Grand Connection sends the URL of meeting and LinkedIn-adjacent tabs you visit to mymosttrusted.net.

GrowBot Automator logs every Instagram account it scrapes for follow/like/comment automation to its own server.

GHL Connect sends the full URL of each completed tab load on its meeting-site host permissions to mymosttrusted.net.

Gluegent Gate AutoLogin fetches stored site credentials from auth.gluegent.net and fills and submits login forms with them.

Grove sends the origin of every http(s) site you visit to api.grove.city to look up tip addresses.

Get Link And Peer Review Coursera sends your Coursera user ID and program memberships to letankim.id.vn on key activation.

GrabzIt Assistant strips security headers and reroutes scripts on grabz.it scrape tabs, and the rules persist after navigation.

GRiX for Gmail sends your Gmail address to the vendor's server to look up your GRiX account.

GCP Toolkit lets scripts on Lazada-family pages make the extension fetch any URL and return the response text.

GetEmail for Gmail sends metadata of each Gmail message you open or send to its own servers.

God Assistant builds its pages from remote JSON schemas and runs schema-supplied JavaScript with access to browser APIs.

GH Copilot Master sends your account email and session token to its backend over unencrypted HTTP.

Gearch replaces the new tab page with a search box that sends typed queries to its own search server by default.

Gumnotes records its new-tab notes page with LogRocket session replay and sends it to LogRocket servers.

GrabzIt Web Monitor accepts any page's postMessage with no origin check, letting it arm the monitor setup with an attacker-chosen API key.

Global Tech Mass Message Sender reads your WhatsApp Web phone number and sends it to its own backend.

Grok to PDF uploads the full Grok conversation HTML to its own cloud backend on every PDF export.

GestorICP sends site cookies to doc9.com.br and redirects signer scripts and NF-e downloads through vendor servers.

GroupMe Translator sends message text and a session token over unencrypted HTTP to its translation server.

GPT Defender reads your full ChatGPT conversation history and uploads it to telemetry.mainnet.bls.dev every 30 minutes.

GoGPT monitors every page you visit and can silently redirect your active tab based on a remote command.

GLB.GE Login auto-fills a hardcoded shared edgepipeline.com login and sends dealer activity logs to demoadmin.glb.ge.

GetMyDrivers SafeWeb sends the hostname of every page you navigate to to safetycheck.cybertrends.co.

GoJo Shipping sends Copart and IAAI login usernames with IP and location details to its vendor backend.