Phantom pass is a collection of LLVM IR and machine code level obfuscation passes. The techniques are either extracted from reversed malware samples (e.g. Mirai, Hancitor and XLoader) or obtained via OSINT. The passes are primarily intended for AArch64, but some also work on other architectures.
The documentation can be found here.
$ make
$ make run