Cognitoys Dino devices allow profiles_add.html CSRF.Referenceshttps://www.pentestpartners.com/security-blog/jurassic-poke-hacking-a-dino-toy/
