diff --git a/pkgs/development/python-modules/pysecretsocks/default.nix b/pkgs/development/python-modules/pysecretsocks/default.nix
new file mode 100644
index 000000000000..2e9a3283c525
--- /dev/null
+++ b/pkgs/development/python-modules/pysecretsocks/default.nix
@@ -0,0 +1,36 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  pyasyncore,
+}:
+
+buildPythonPackage rec {
+  pname = "pysecretsocks";
+  version = "0.9.1-unstable-2023-11-04";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "BC-SECURITY";
+    repo = "PySecretSOCKS";
+    rev = "da5be0e48f82097044894247343cef2111f13c7a";
+    hash = "sha256-3jvMVsoKgBN4eRc6hyj7X/uu7NoJvofsbljVcgGfcPc=";
+  };
+
+  build-system = [ setuptools ];
+
+  dependencies = [ pyasyncore ];
+
+  # Module has no tests
+  doCheck = false;
+
+  pythonImportsCheck = [ "secretsocks" ];
+
+  meta = {
+    description = "Socks server for tunneling a connection over another channel";
+    homepage = "https://github.com/BC-SECURITY/PySecretSOCKS";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ fab ];
+  };
+}
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index 01783229d96c..9637a509595d 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -4065,6 +4065,8 @@ self: super: with self; {
 
   donfig = callPackage ../development/python-modules/donfig { };
 
+  donut-shellcode = callPackage ../development/python-modules/donut-shellcode { };
+
   doorbirdpy = callPackage ../development/python-modules/doorbirdpy { };
 
   dopy = callPackage ../development/python-modules/dopy { };
@@ -13168,6 +13170,8 @@ self: super: with self; {
 
   pysearpc = toPythonModule (pkgs.libsearpc.override { python3 = self.python; });
 
+  pysecretsocks = callPackage ../development/python-modules/pysecretsocks { };
+
   pysecuritas = callPackage ../development/python-modules/pysecuritas { };
 
   pysendfile = callPackage ../development/python-modules/pysendfile { };