You could just send raw 802.11 data frames and then receive them with monitor mode on the other end.