This paper provides a step by step walk-through of popular wireless attacks. It also describes how to perform the new AP Impersonation attack using FreeRADIUS-WPE, the new EAP-MD5 Brute force attack, and a variety of other not-so documented attacks.
You can download it from the following link: https://packetstormsecurity.com/files/download/63951/802.11Attacks.pdf
Source: https://packetstormsecurity.com/files/63951/802.11Attacks.pdf.html