Originally Posted by sylvain

can we imagine if we have a big known (plaintext paquet) to spoof the IP/MAC address of the access point and to build a crafted broadcast ping encrypted packet ? so that clients with respond to it and generate other encrypted packets...