you have to have a handshake first off, then you can bruteforce using a wordlist
You can't initiate the handshake without MONITOR MODE though.
Both of you are wrong. Bombed, you can bruteforce without a handshake capture. All you have to do is loop a connection script to keep connecting with various passwords. It is orders of magnitudes slower than a handshake-capture crack, but it is in fact possible. And godman, If you can't do a WPA handshake, you can't authenticate to the AP. No authentication, no connection. Just to make sure you guys know.