Not really a hacking tutorial but kinda interesting: https://youtu.be/CsryuAyB0nw
Find your PI in your wifi.
In short: You can set up your pi to work with a password protected wifi and automatically enable ssh without booting the pi, with config files in the /boot partition.
I used this for my AIY and scanned the network using nmap to find my pi.
From there you can just connect to the pi.
If you wanna see it in actiob check the video below.