A "mod menu" is not usable online anymore after Steam patched the issue. So logically you couldn't get banned for using one or you could get banned if you're found injecting one. They work in custom games, but I'm not 100% sure if VAC is enabled there or not so use at your own risk