Towards an Automatic Generation of Low-Interaction Web Application Honeypots. - Marius Musch; Martin Härterich; Martin Johns (ARES, 2018)

Web-based Cryptojacking in the Wild. - Marius Musch; Christian Wressnegger; Martin Johns; Konrad Rieck (CoRR, 2018)

Thieves in the Browser: Web-based Cryptojacking in the Wild. - Marius Musch; Christian Wressnegger; Martin Johns; Konrad Rieck (ARES, 2019)

ScriptProtect: Mitigating Unsafe Third-Party JavaScript Practices. - Marius Musch; Marius Steffens; Sebastian Roth; Ben Stock; Martin Johns (AsiaCCS, 2019)

New Kid on the Web: A Study on the Prevalence of WebAssembly in the Wild. - Marius Musch; Christian Wressnegger; Martin Johns; Konrad Rieck (DIMVA, 2019)

Who's Hosting the Block Party? Studying Third-Party Blockage of CSP and SRI. - Marius Steffens; Marius Musch; Martin Johns; Ben Stock (NDSS, 2021)

U Can't Debug This: Detecting JavaScript Anti-Debugging Techniques in the Wild. - Marius Musch; Martin Johns (USENIX Security Symposium, 2021)

Accept All Exploits: Exploring the Security Impact of Cookie Banners. - David Klein 001; Marius Musch; Thomas Barber; Moritz Kopmann; Martin Johns (ACSAC, 2022)

Server-Side Browsers: Exploring the Web's Hidden Attack Surface. - Marius Musch; Robin Kirchner; Max Boll; Martin Johns (AsiaCCS, 2022)

No keys to the kingdom required: a comprehensive investigation of missing authentication vulnerabilities in the wild. - Manuel Karl; Marius Musch; Guoli Ma; Martin Johns; Sebastian Lekies (IMC, 2022)

Advanced Attack and Vulnerability Scanning for the Modern Web. - Marius Musch (2023)

Dancer in the Dark: Synthesizing and Evaluating Polyglots for Blind Cross-Site Scripting. - Robin Kirchner; Jonas Möller; Marius Musch; David Klein 001; Konrad Rieck; Martin Johns (USENIX Security Symposium, 2024)