If you have found port 8009 opened,try Ghostcat read file/code execute,CNVD-2020-10487(CVE-2020-1938)
You can read and write files on the server.
Run nmap on your targets file to find port 8009.
The exploit is available here:-
Best of luck.
#bugbountytips