diff --git a/pkgs/development/python-modules/certihound/default.nix b/pkgs/development/python-modules/certihound/default.nix
new file mode 100644
index 000000000000..a403d6a70200
--- /dev/null
+++ b/pkgs/development/python-modules/certihound/default.nix
@@ -0,0 +1,46 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchPypi,
+  ldap3,
+  impacket,
+  cryptography,
+  pydantic,
+  click,
+  rich,
+  setuptools,
+}:
+
+buildPythonPackage (finalAttrs: {
+  pname = "certihound";
+  version = "0.3.0";
+  pyproject = true;
+
+  src = fetchPypi {
+    inherit (finalAttrs) pname version;
+    hash = "sha256-ERJ5fbYikhKLwchSIBe5s4KF/1HsXZ1O00QnYXAe+ps=";
+  };
+
+  build-system = [ setuptools ];
+
+  dependencies = [
+    ldap3
+    impacket
+    cryptography
+    pydantic
+    click
+    rich
+  ];
+
+  # Tests are stripped in pypi
+  doCheck = false;
+
+  pythonImportsCheck = [ "certihound" ];
+
+  meta = {
+    homepage = "https://github.com/0x0Trace/Certihound";
+    description = "Active Directory Certificate Services (ADCS) enumeration library with BloodHound CE v6 export support";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ letgamer ];
+  };
+})
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index a9dd0eda53f7..9d4502297be8 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -2609,6 +2609,8 @@ self: super: with self; {
 
   certifi = callPackage ../development/python-modules/certifi { };
 
+  certihound = callPackage ../development/python-modules/certihound { };
+
   certipy = callPackage ../development/python-modules/certipy { };
 
   certipy-ad = callPackage ../development/python-modules/certipy-ad { };