WLAN discovery
Airodump-ng
Kismet
Netstumbler
Ministumbler
Commview
Wifi Hopper
Wirelessmon
Airopeek
Wellenreiter
WEP encrypted WLAN
Visible SSID
Attempt WEPattack
802.1x WLAN

Create Rogue Access PointSee http://www.vulnerabilityassessment.co.uk for the full Penetration Testing Framework

Wireless Penetration
WLAN discovery
Airodump-ng
Kismet
Netstumbler
Ministumbler
Commview
Wifi Hopper
Wirelessmon
Airopeek
Wellenreiter
WEP encrypted WLAN
Visible SSID
Attempt WEPattack
802.1x WLAN

Create Rogue Access Point