on networks you own or have explicit permission to test. Unauthorized use on public or private networks can lead to legal consequences. Is Kali Linux legal? - Techjockey
ARP spoofing allows an attacker to see your traffic, but if the traffic is encrypted (HTTPS, VPN, SSH), they see only gibberish. netcut kali linux