Two key things distinguish good Exploratory Testing as a disciplined form of testing:
1. Using a wide variety of analysis/testing techniques to target vulnerabilities from multiple perspectives.
2. Using charters to focus effort on those vulnerabilities that are of most interest to stakeholders.
Hopefully I’ll find time to update this post with examples of the types of exploratory tests I find myself doing routinely.