KARMA-ish attack on IEEE 802.1X type networks

[thepancakeplant]

With IEEE 802.1X, I mean networks that are secured with a username and a password. These type of networks mostly of the time are secured with a certificate, but let's say all users select to not check for certificate. Is it possible to spoof this type of network, letting the users connect to my fake network, and give their usernames and passwords? Are these hashed?

I am quite new to using the Wifi Pineapple, so I may not understand some terms you could use.

[DramaKing]

Never done this, but this is what the Evil Enterprise tab is for. https://docs.hak5.org/wifi-pineapple/ui-overview/pineap#:~:text=The Enterprise tab,use MSCHAPv2 mode.

Should be possible to sniff the handshake also with a little work.