How does an ARP Spoofing Attack work?

Hey HN, Id like to learn more about cybersecurity and wanna test around a bit, ive used tool like net cut a lot a few years ago to troll my brother when he was using all the bandwidth, but id like to actually learn how it works and how those tools do stuff. Does anyone have links to good guides or wanna share their own knowledge?