Web application penetration test of an ERP interface