1.) It would be a good thing to integrate the so called "chop chop" attack. Look here: http://www.wi-foo.com/soft/attack/chopchop-0.1.zip http://www.netstumbler.org/showthread.php?t=12489 2.) The reinjection stuff should be improved / rewritten 3.) Perhaps this is interesting, too: http://www.wi-foo.com/soft/attack/applewepkey.c 4.) A very comprehensive collection of availiable techniques and tools is availiable on the site of the wi-foo book: http://www.wi-foo.com/ViewPageefe4.html?siteNodeId=55&languageId=1&contentId=-1 greetings.