ElevateKit

exit the thread; not the process, due to migrate to winlogon.exe in the exploit impl.

slight clarification in the comments.

Integrate CVE-2020-0796 (SMBGhost) LPE from the Metasploit Framework.

Use &payload_local to generate a payload with parent-session inherited pointers when parent is same-arch and .stage.smartinject is true.

Updated &bpowershell and &bpowerpick in Aggressor Script to accept a download cradle argument (to avoid the powershell-import one). This updates Elevate Kit to use that.