How To Audit Wireless Access Point(pdf)(ictsecurity.gov.my)

Auditorでkismet、Airodump、Aireplayを使う。
WiFitapというツールも。

WiFitap is a proof of concept for communication over WiFi networks using traffic injection. It basically allows one to communicate over an open or WEP 802.11 network without being associated, thus bypassing any AP side restriction such as MAC address filtering or station isolation. Platform: Unix/Linux.

http://www.ictsecurity.gov.my/archiveTools.do?catId=All　より なんか楽しげなモノがある雰囲気ｗ