JM00NJ/Phantom-Evasion-Loader — reverse-engineered prompt

Build me a safe educational version of this Linux x64 assembly research project that demonstrates the ideas without creating a real injector or payload runner.

I want it to feel like a small security research repo for authorized lab use. It should explain SROP, direct syscalls, process memory writing, runtime XOR decoding, and why defenders care about these behaviors, but the code must not inject into another process, bypass EDR, hide from monitoring, or run shellcode. Use harmless stubs and a local buffer demo instead, with clear comments showing where dangerous parts would be intentionally omitted.

Include a simple XOR helper script, a readable README with setup and build steps, a legal and safety disclaimer, and a small demo that prints what it would do in a lab simulation. Keep it lightweight and easy to understand for someone learning low level Linux security concepts. Look up current docs online if you need to.