A very simple method I use for execs or other audiences is to fire up aircrack/airmon-ng in the room , and watch all their devices beacon for their saved wireless networks. Then show how you can spoof those network names to create fake APs that they will connect to. From there you can show how MiTM or things like SSLstrip work.