that is how it works, it's called KRACK attack.>>3053https://www.krackattacks.com/
Unfortunately, this flaw is already fixed on any good modern router. From the other side, I see my neighbours running 2009 d-links, so that's should not be a problem. From the other side, their passwords usually are so easy, even my celeron is cracking it in 10 minutes with common dictionary.
HowTo: there are tons of information in google.
The other way to crack wifi without bruteforce is to create FakeAP, i.e Fake Access Point, clone of your target WiFi point to which its user will reconnect after you will send him deauth key. When the user of your target wifi point tries to reconnect, your fake point asks for a password, user has no option except to type his usual wifi password, woila, you're in.
HowTo: search for something like 'Fluxion', it's very easy and does not require any skills. Script will lead you what to do.