Well if you are looking for alternative methods i can come up with a couple:
1) Go and SE your way into the building and then use WirelessKeyView on a PC or get access to the router and look for default settings on the back and hard reset
2) *You will like this one*, Clone the WPA AP, then use airdrop-ng to disconnect all the users from target AP, and boot them on to yours (Its cloned), then DNS spoof the users to a page saying 'Router error: Please re-enter your wireless key and router password', phish the input from their and then allow your own MAC to connect to the target AP using airdrop-ng + the wireless key (but still denying the others access) then you have access to the network + the router. Once you have had a look at the router settings, get the clients back on the network by killing airdrop-ng and your fake AP.
Never done it myself, but perhaps if you got really dedicated you could get that to work. However i still maintain the easiest way is to use social engineering, like is explained in my tutorials.
1) Go and SE your way into the building and then use WirelessKeyView on a PC or get access to the router and look for default settings on the back and hard reset
2) *You will like this one*, Clone the WPA AP, then use airdrop-ng to disconnect all the users from target AP, and boot them on to yours (Its cloned), then DNS spoof the users to a page saying 'Router error: Please re-enter your wireless key and router password', phish the input from their and then allow your own MAC to connect to the target AP using airdrop-ng + the wireless key (but still denying the others access) then you have access to the network + the router. Once you have had a look at the router settings, get the clients back on the network by killing airdrop-ng and your fake AP.
Never done it myself, but perhaps if you got really dedicated you could get that to work. However i still maintain the easiest way is to use social engineering, like is explained in my tutorials.
