Web application penetration test of an extensive ERP system with an additional SFTP interface