I'm working with a guy right now, I guess he's very familiar with C and is attempting to modify MDK3 for the Invalid SSID Character Attack. I've had one person take a different approach to this and he reported unsuccessful but there are a lot of possible variations in setup. It will take a lot of tinkering and figuring but hopefully we can come up with a working solution.

The reason I'm particularly interested in this is because some ISPs began taking action to prevent against Pixie Dust attacks, particularly TWC at the moment, and they now lock WPS after 1 exchange, even if the exchange completely fails.

Hence, a quick way to reboot after grabbing the necessary data would lead to a successful attack.