What you're talking about works for unencrypted networks, but you can just grab that data off the air anyway. It won't work for WPA2.

>spoof ssl

Only if either they blindly accept invalid certs, or you somehow already installed a root CA on their boxen.

Sounds to me like you found an all-in-one tool, which doesn't make you understand how the process works or its limitations. I would agree that many wireless networks are hideously insecure (why I SSH tunnel my traffic when I'm on one), but it isn't that bad unless you're either running unauthenticated or using WEP.