Which tool can sniff probe requests from a wireless client, pretend to be the client's legitimate access point, and offer fake network services to the client?

inSSIDer is a Wi-Fi scanning and network analysis tool used to visualize nearby access points and signal strength; it does not perform rogue AP or fake service attacks.

Aircrack-ng is a suite focused on WEP and WPA/WPA2 key cracking through packet capture and analysis; it does not impersonate access points or host fake network services.

Karmetasploit integrates with the Metasploit Framework and uses a wireless card to listen for 802.11 probe requests broadcast by clients searching for known networks. It then impersonates those networks as a rogue AP and automatically launches fake services such as DNS, HTTP, POP3, and SMTP to capture credentials and exploit connecting clients.

Wellenreiter is a legacy passive wireless network discovery and auditing tool for Linux; it does not perform active rogue AP impersonation or serve fake services to clients.