Check sources for the WPS handshake attacks from the WIFITE package.
I remember it listing clients of all scanned APs, with MACs.
(Needs clients info to force deauth and capture handshake)
Holds data for a Client (device connected to Access Point/Router)
def __init__(self, bssid, station, power):
self.bssid = bssid
self.station = station
self.power = power
#sniff for client mac's
I don't know python very well, but it's in there.
Comment: remove inaccurate pieces of code via edit