[Oni]

There's actually a number of posts and Defcon talks pertaining to this.

i've seen those, but they're relatively simple and dont give much information

On the contrary, they provide multiple examples for points of entry. Whether it's a physical console, poorly protected network, unencrypted traffic, or a Masterlock. That could mean accessing the physical console, cracking, intercepting traffic, or using lockpicks. All of those have their own hypothetical solutions, but it's up to you to do proper reconnaissance and determine your own point of entry. This is not a recommendation, just information.

Theres dozens of tutorials for aircrack and reaver on youtube.

This, as well.