Morris, an attacker, wanted to check whether the target AP is in a locked state. He attempted using different utilities to identify WPS-enabled APs in the target wireless network. Ultimately, he succe

wash is a passive scanning tool bundled with the Reaver suite (available in Kali Linux) that monitors beacon and probe response frames to enumerate WPS-enabled access points in range. It displays each AP's BSSID, channel, RSSI, WPS version, and crucially the WPS lock status, which is precisely the information Morris needed to determine whether target APs were in a locked state.

ntptrace is a utility for tracing the hierarchy of NTP servers synchronizing time on a network and has no functionality related to wireless networks or WPS enumeration.

macof is a Layer 2 attack tool used to flood a switch's CAM table with fake MAC addresses to force the switch into fail-open (hub) mode, which is entirely unrelated to wireless WPS discovery.

net view is a Windows command for listing shared folders and computers in a workgroup or domain and has no capability for scanning wireless networks or identifying WPS-enabled access points.