Create a step-by-step workflow for vulnerability discovery based on this SOP: 1) Target selection criteria 2) Domain enumeration techniques 3) Asset discovery methods 4) Host/service detection 5) API endpoint testing 6) Vulnerability validation procedures 7) Standardized reporting format. Include common tools for each step like Sublist3r, Nmap, Burp Suite.