I was wondering if there are any methods I'm unaware of that will allow an attacker to attempt to obtain WiFi access outside the physical range of the WiFi signal.
When using net-stumbler or any other signal detection suites, we all know it'll report the following:
BSSID/Mac,PWR,RXQ,Beacons,#data,#/s,CH,MB,ENC,Cipher,Auth, and ESSID.
I'm familiar with the common WiFi attacks that it requires the attacker to be in physical range of the WiFi.
My Question is: Are there any other methods of finding out network information enough to remotely attempt to audit the security parameters of their WiFi/network?
I hope I conveyed my thoughts enough... Please let me know if I can provide any further details to the scope of my question.