I was just exploring with WPSPIN GUI and was looking at one of their tools in it called WPScan (not the wordpress one) and it basically looks for APs that support WPS, similar to wash. However, it also displays the model of the router and I'm interested how it finds this information. I'm assuming it's in the beacon frames sent sent out by the AP but can someone highlight where? (If that is where the info is.) Thanks!
