As asked in this question, there is a program called Dumpper. it can find PIN of AP without brute forcing them.
But with another tool called
Jumpstart, together they can crack any AP that is running WPS feature.
It laterally bring the PSK of WPA2 within seconds "depending on signal strength".
I've read a lot about WPS flaws and other security issues, but I still don't know what exactly those two applications are doing.
How they can bring the PSK in such speed "not using any brute force"?